Network Access (Mac Address Authentication); Table 79: Network Access Commands - Edge-Core ECS3510-26P Management Manual

| General Security Measures
C 24
HAPTER

Network Access (MAC Address Authentication)

N A
ETWORK CCESS
R C
ELATED OMMANDS
show interfaces status (741)
shutdown (736)
mac-address-table static (790)
(MAC A A
DDRESS UTHENTICATION
Network Access authentication controls access to the network by
authenticating the MAC address of each host that attempts to connect to a
switch port. Traffic received from a specific MAC address is forwarded by
the switch only if the source MAC address is successfully authenticated by
a central RADIUS server. While authentication for a MAC address is in
progress, all traffic is blocked until authentication is completed. Once
successfully authenticated, the RADIUS server may optionally assign VLAN
and QoS settings for the switch port.

Table 79: Network Access Commands

Command
network-access aging
network-access mac-filter
mac-authentication reauth-
time
network-access dynamic-qos
network-access dynamic-vlan
network-access guest-vlan
network-access link-detection
network-access link-detection
link-down
network-access link-detection
link-up
network-access link-detection
link-up-down
network-access max-mac-
count
network-access mode
mac-authentication
network-access port-mac-
filter
mac-authentication intrusion-
action
mac-authentication max-
mac-count
clear network-access
show network-access
)
Function
Enables MAC address aging
Adds a MAC address to a filter table
Sets the time period after which a connected MAC
address must be re-authenticated
Enables the dynamic quality of service feature
Enables dynamic VLAN assignment from a RADIUS
server
Specifies the guest VLAN
Enables the link detection feature
Configures the link detection feature to detect and
act upon link-down events
Configures the link detection feature to detect and
act upon link-up events
Configures the link detection feature to detect and
act upon both link-up and link-down events
Sets the maximum number of MAC addresses that
can be authenticated on a port via all forms of
authentication
Enables MAC authentication on an interface
Enables the specified MAC address filter
Determines the port response when a connected
host fails MAC authentication.
Sets the maximum number of MAC addresses that
can be authenticated on a port via MAC
authentication
Clears authenticated MAC addresses from the
address table
Displays the MAC authentication settings for port
interfaces
– 666 –
Mode
GC
GC
GC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
PE
PE