| General Security Measures
C
25
HAPTER
Network Access (MAC Address Authentication)
mac-authentication
reauth-time
C
M
OMMAND
ODE
Global Configuration
C
U
OMMAND
SAGE
Specified addresses are exempt from network access authentication.
◆
This command is different from configuring static addresses with the
◆
mac-address-table static
range of addresses when using a mask, and then to assign these
addresses to one or more ports with the
command.
Up to 64 filter tables can be defined.
◆
There is no limitation on the number of entries that can entered in a
◆
filter table.
E
XAMPLE
Console(config)#network-access mac-filter 1 mac-address 11-22-33-44-55-66
Console(config)#
Use this command to set the time period after which a connected MAC
address must be re-authenticated. Use the no form of this command to
restore the default value.
S
YNTAX
mac-authentication reauth-time seconds
no mac-authentication reauth-time
seconds - The reauthentication time period.
(Range: 120-1000000 seconds)
D
S
EFAULT
ETTING
1800
C
M
OMMAND
ODE
Global Configuration
C
U
OMMAND
SAGE
The reauthentication time is a global setting and applies to all ports.
◆
When the reauthentication time expires for a secure MAC address it is
◆
reauthenticated with the RADIUS server. During the reauthentication
process traffic through the port remains unaffected.
E
XAMPLE
Console(config)#mac-authentication reauth-time 300
Console(config)#
– 656 –
command in that it allows you configure a
network-access port-mac-filter