Table of Contents
Advertisement
mac-authentication access-group
By applying the MAC access list to MAC-based authentication ports, sets whether terminals
are to be authenticated or not by using MAC addresses.
Input format
To set or change information:
mac-authentication access-group
To delete information:
no mac-authentication access-group
Input mode
(config)
Parameters
<ACL ID>
Sets the identifier of the MAC packet filter that is to be set.
1.
2.
Default behavior
All terminals connected to MAC-based authentication ports are subject to authentication.
Impact on communication
When an access list with at least one entry is applied to an interface, all frames received on
the applicable interface are temporarily discarded until the entry is applied to the interface.
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1.
All MAC-based authentication settings take effect when the
system-auth-control
2.
See Configuration commands and MAC-based authentication modes for the
authentication mode in which the command's settings are operable.
3.
Implicit discard is present in a registered MAC access list. If the MAC address of a
terminal is not found in the MAC access list you have set, the terminal is not subject to
authentication due to implicit discard.
4.
If a non-existent MAC access list is set, no operation is performed. The identifier of
the MAC access list is registered.
Default value when this parameter is omitted:
This parameter cannot be omitted.
Range of values:
Set 3 to 31 characters, the first character of which must be a non-numeric
character. For details about the characters that can be specified, see
Specifiable values for parameters.
command is set.
mac-authentication access-group
<ACL ID>
mac-authentication
513
Advertisement
Table of Contents
