D-Link xStack DGS-3120 Series Cli Reference Manual page 603

®
xStack DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch CLI Reference Guide
Example
To set the MAC-based Access Control guest VLAN membership:
DGS-3120-24TC:admin# config mac_based_access_control guest_vlan ports 1:1-1:8
Command: config mac_based_access_control guest_vlan ports 1:1-1:8
Success.
DGS-3120-24TC:admin#
57-7 config mac_based_access_control ports
Description
This command is used to configure MAC-based Access Control port's setting.
When the MAC-based Access Control function is enabled for a port and the port is not a MAC-
based Access Control guest VLAN member, the user who is attached to this port will not be
forwarded unless the user passes the authentication.
•
A user that does not pass the authentication will not be serviced by the Switch.
•
If the user passes the authentication, the user will be able to forward traffic operated under
the assigned VLAN.
When the MAC-based Access Control function is enabled for a port, and the port is a MAC-based
Access Control guest VLAN member, the port(s) will be removed from the original VLAN(s)
member ports, and added to MAC-based Access Control guest VLAN member ports.
•
Before the authentication process starts, the user is able to forward traffic under the guest
VLAN.
•
After the authentication process, the user will be able to access the assigned VLAN.
If the port authorize mode is port based mode, when the port has been moved to the authorized
VLAN, the subsequent users will not be authenticated again. They will operate in the current
authorized VLAN.
If the port authorize mode is host based mode, then each user will be authorized individually and
be capable of getting its own assigned VLAN.
If port's block time is set to" infinite", it means that a failed authentication client will never be
blocked. Block time will be set to "0".
Format
config mac_based_access_control ports [<portlist> | all] {state [enable | disable] | mode
[port_based | host_based] | aging_time [infinite | <min 1-1440>] | block_time <sec 0-300> |
max_users [<value 1-1000> | no_limit]}(1)
598