Alaxala AX1250S Software Manual page 544

mac-authentication force-authorized vlan
2. See Configuration commands and MAC-based authentication modes for the
authentication mode in which the command's settings are operable.
3. Set a VLAN ID for which
command.
4. Be especially careful when using this functionality, as it can pose a security problem.
5. This command is enabled when the following condition exists:

#1
#2
#3
#4
#5
#6
6. The forced authentication authorization state is canceled if authentication for the
applicable terminal is canceled.
520
mac-based
All the following configurations have been set:
- radius-server host
- mac-authentication system-auth-control
mac-authentication port
-
mac-authentication interface
-
mac-authentication vlan
-
<VLAN ID list>
- vlan
- mac-authentication force-authorized vlan
- switchport mac vlan
- switchport mode mac-vlan
- aaa authentication mac-authentication
mac-authentication authentication
-
Set this configuration to use it in dynamic VLAN mode.
Set this command when using legacy mode.
Set the same VLAN ID for commands marked
Specify the same Ethernet port.
- The following accounting log data is collected when an authentication
request is sent to the RADIUS server:
No=21:
NOTICE: LOGIN:
connection to RADIUS server.
<Additional information>
The accounting log data can be confirmed by using the
mac-authentication logging
When forced authentication is used as the Switch default, set only
group radius .
When forced authentication is used for the port-based authentication method,
set aaa authentication mac-authentication
(MAC VLAN) has been set in the
or
mac-authentication radius-server host
#1, #4
#2
#2, #3
#3
mac-based
#2, #3, #4
#4
(<Additional information>)
: MAC, PORT, VLAN
operation command.
vlan
#3, #4
#5
#6
#3
.
Login failed ; Failed to
show
default
<List name>.