Digi LR54 User Manual page 157

Interfaces
(config network interface my_lan)> ipv6 prefix_length 60
(config network interface my_lan)>
If the minimum length is not available, then a longer prefix will be used.
See Configure WAN/WWAN priority and default route metrics
metrics.
8. (Optional) To configure 802.1x port based network access control:
Note The LR54 can function as an 802.1x authenticator; it does not function as an 802.1x
supplicant.
a. Enable the 802.1x authenticator on the LR54 device:
(config network interface my_lan)> 802_1x authentication enable true
(config network interface my_lan)>
b. Set the frequency period for reauthorization:
(config network interface my_lan)> 802_1x authentication reauth_period
value
(config network interface my_lan)>
where value is an integer between 0 and 86400. The default is 3600.
9. (Optional) Configure the MAC address deny list.
Incoming packets will be dropped from any devices whose MAC addresses is included in the
MAC address denylist.
a. Add a MAC address to the denylist:
(config network interface my_lan)> add mac_denylist end mac_address
(config network interface my_lan)>
where mac_address is a hyphen-separated MAC address, for example, 32-A6-84-2E-81-58.
b. Repeat for each additional MAC address.
10. (Optional) Configure the MAC address allowlist.
If allowlist entries are specified, incoming packets will only be accepted from the listed MAC
addresses.
a. Add a MAC address to the allowlist:
(config network interface my_lan)> add mac_allowlist end mac_address
(config network interface my_lan)>
where mac_address is a hyphen-separated MAC address, for example, 32-A6-84-2E-81-58.
b. Repeat for each additional MAC address.
11. Save the configuration and apply the change:
(config network interface my_lan)> save
Configuration saved.
>
LR54 User Guide
Local Area Networks (LANs)
for further information about
157