Network Access (Mac Address Authentication) - Edge-Core AS6700-32X Cli Reference Manual

Network Access
(MAC Address Authentication)
MAC Filter
Last Intrusion MAC
Last Time Detected Intrusion MAC
Console#
Network Access authentication controls access to the network by authenticating
the MAC address of each host that attempts to connect to a switch port. Traffic
received from a specific MAC address is forwarded by the switch only if the source
MAC address is successfully authenticated by a central RADIUS server. While
authentication for a MAC address is in progress, all traffic is blocked until
authentication is completed. Once successfully authenticated, the RADIUS server
may optionally assign VLAN and QoS settings for the switch port.
Table 51: Network Access Commands
Command
network-access aging
network-access mac-filter
mac-authentication reauth-time
network-access dynamic-qos
network-access dynamic-vlan
network-access guest-vlan
network-access link-detection
network-access link-detection
link-down
network-access link-detection
link-up
network-access link-detection
link-up-down
network-access max-mac-count
network-access mode
mac-authentication
network-access port-mac-filter
mac-authentication
intrusion-action
mac-authentication
max-mac-count
clear network-access
show network-access
Chapter 8

Network Access (MAC Address Authentication)

: Disabled
: 00-10-22-00-00-01
: 2010/7/29 15:13:03
Function
Enables MAC address aging
Adds a MAC address to a filter table
Sets the time period after which a connected MAC
address must be re-authenticated
Enables the dynamic quality of service feature
Enables dynamic VLAN assignment from a RADIUS server IC
Specifies the guest VLAN
Enables the link detection feature
Configures the link detection feature to detect and act
upon link-down events
Configures the link detection feature to detect and act
upon link-up events
Configures the link detection feature to detect and act
upon both link-up and link-down events
Sets the maximum number of MAC addresses that can be
authenticated on a port via all forms of authentication
Enables MAC authentication on an interface
Enables the specified MAC address filter
Determines the port response when a connected host
fails MAC authentication.
Sets the maximum number of MAC addresses that can be
authenticated on a port via MAC authentication
Clears authenticated MAC addresses from the address
table
Displays the MAC authentication settings for port
interfaces
– 261 –
| General Security Measures
Mode
GC
GC
GC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
PE
PE