Auth-Mac Enable - Allied Telesis x510-28GTX Command Reference Manual

A C
UTHENTICATION OMMANDS
-
AUTH MAC ENABLE

auth-mac enable

Overview This command enables MAC-based authentication on the interface specified in the
Interface command mode.
Use the no variant of this command to disable MAC-based authentication on an
interface.
Syntax auth-mac enable
no auth-mac enable
Default MAC-Authentication is disabled by default.
Mode Interface Configuration for a static channel, a dynamic (LACP) channel group, or a
switch port; or Authentication Profile mode.
Usage Enabling spanning-tree edgeport on ports after enabling MAC-based
authentication avoids unnecessary re-authentication when the port state changes,
which does not happen when spanning tree edgeport is enabled. Note that
re-authentication is correct behavior without spanning-tree edgeport enabled.
Applying switchport mode access on ports is also good practice to set the ports
to access mode with ingress filtering turned on, whenever ports for
MAC-Authentication are in a VLAN.
To enable MAC-Authentication on interface port1.0.2 and enable spanning
Examples
tree edgeport to avoid unnecessary re-authentication, use the following
commands:
awplus#
awplus(config)#
awplus(config-if)#
awplus(config-if)#
awplus(config-if)#
To disable MAC-Authentication on interface port1.0.2, use the following
commands:
awplus#
awplus(config)#
awplus(config-if)#
To enable MAC authentication on authentication profile 'student', use the
commands:
awplus#
awplus(config)#
awplus(config-auth-profile)#
C613-50170-01 Rev B
configure terminal
interface port1.0.2
auth-mac enable
spanning-tree edgeport
switchport mode access
configure terminal
interface port1.0.2
no auth-mac enable
configure terminal
auth profile student
Command Reference for x510 Series
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
auth-mac enable
1761