Digi Connect IT 4 User Manual page 132

Interfaces
See Configure WAN/WWAN priority and default route metrics
metrics.
8. (Optional) To configure 802.1x port based network access control:
Note The Connect IT 4 can function as an 802.1x authenticator; it does not function as an
802.1x supplicant.
a. Enable the 802.1x authenticator on the Connect IT 4 device:
(config network interface my_wan)> 802_1x authentication enable true
(config network interface my_wan)>
b. Set the frequency period for reauthorization:
(config network interface my_wan)> 802_1x authentication reauth_period
value
(config network interface my_wan)>
where value is an integer between 0 and 86400. The default is 3600.
9. (Optional) Configure the MAC address deny list.
Incoming packets will be dropped from any devices whose MAC addresses is included in the
MAC address denylist.
a. Add a MAC address to the denylist:
(config network interface my_wan)> add mac_denylist end mac_address
(config network interface my_wan)>
where mac_address is a hyphen-separated MAC address, for example, 32-A6-84-2E-81-58.
b. Repeat for each additional MAC address.
10. (Optional) Configure the MAC address allowlist.
If allowlist entries are specified, incoming packets will only be accepted from the listed MAC
addresses.
a. Add a MAC address to the allowlist:
(config network interface my_wan)> add mac_allowlist end mac_address
(config network interface my_wan)>
where mac_address is a hyphen-separated MAC address, for example, 32-A6-84-2E-81-58.
b. Repeat for each additional MAC address.
11. See Configure SureLink active recovery to detect WAN/WWAN failures
configuring SureLink for active recovery.
12. Save the configuration and apply the change:
(config network interface my_wan)> save
Configuration saved.
>
Digi Connect IT® 4 User Guide
Wide Area Networks (WANs)
for further information about
for information about
132