Enabling And Disabling Mac-Based Network Login; Associating A Mac Address To A Specific Port; Adding And Deleting Mac Addresses - Extreme Networks ExtremeWare XOS Guide Manual

Secure MAC Configuration Example on page 370
●
MAC-Based Network Login Configuration Example on page 371
●

Enabling and Disabling MAC-Based Network Login

To enable MAC-based network login on the switch, use the following command:
enable netlogin mac
Any combination of types of authentication can be enabled on the same switch. At least one of the
authentication types must be specified on the CLI.
To disable MAC-based network login on the switch, use the following command:
disable netlogin mac
To enable MAC-based network login on one or more ports, use the following command:
enable netlogin ports
Network Login must be disabled on a port before you can delete a VLAN that contains that port. To
disable MAC-based network login on one or more ports, use the following command:
disable netlogin ports

Associating a MAC Address to a Specific Port

You can configure the switch to accept and authenticate a client with a specific MAC address. Only
MAC addresses that have a match for the specific ports are sent for authentication. For example, if you
associate a MAC address with one or more ports, only authentication requests for that MAC address
received on the port(s) are sent to the configured RADIUS server or local database. The port(s) block all
other authentication requests that do not have a matching entry. This is also known as secure MAC.
To associate a MAC address with one or more ports, specify the
command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} {<password>}
{ports <port_list>}
You must enable MAC-based netlogin on the switch and the specified ports. If MAC-based netlogin is
not enabled on the specified port(s), the switch displays a warning message similar to the following:
WARNING: Not all specified ports have MAC-Based NetLogin enabled.
For a sample configuration, see

Adding and Deleting MAC Addresses

To add a MAC address to the table, use the following command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} {<password>}
{ports <port_list>}
ExtremeWare XOS 11.3 Concepts Guide
<portlist> mac
<portlist> mac
"Secure MAC Configuration Example" on page
MAC-Based Authentication
option when using the following
ports
370.
369