Digi IX20W-PR User Manual page 187

Interfaces
enable
(config network interface my_lan)>
d. Modify any of the remaining default settings as appropriate. For example, to change the
minimum length of the prefix:
(config network interface my_lan)> ipv6 prefix_length 60
(config network interface my_lan)>
If the minimum length is not available, then a longer prefix will be used.
See Configure WAN/WWAN priority and default route metrics
metrics.
8. (Optional) To configure 802.1x port based network access control:
Note The IX20 can function as an 802.1x authenticator; it does not function as an 802.1x
supplicant.
a. Enable the 802.1x authenticator on the IX20 device:
(config network interface my_lan)> 802_1x authentication enable true
(config network interface my_lan)>
b. Set the frequency period for reauthorization:
(config network interface my_lan)> 802_1x authentication reauth_period
value
(config network interface my_lan)>
where value is an integer between 0 and 86400. The default is 3600.
9. (Optional) Configure the MACaddress deny list.
Incoming packets will be dropped from any devices whose MACaddresses is included in the
MACaddress denylist.
a. Add a MAC address to the denylist:
(config network interface my_lan)> add mac_denylist end mac_address
(config network interface my_lan)>
where mac_address is a hyphen-separated MACaddress, for example, 32-A6-84-2E-81-58.
b. Repeat for each additional MAC address.
10. (Optional) Configure the MACaddress allowlist.
If allowlist entries are specified, incoming packets will only be accepted from the listed MAC
addresses.
a. Add a MAC address to the allowlist:
(config network interface my_lan)> add mac_allowlist end mac_address
(config network interface my_lan)>
where mac_address is a hyphen-separated MACaddress, for example, 32-A6-84-2E-81-58.
IX20 User Guide
true Enable
Local Area Networks (LANs)
for further information about
187