D-Link DXS-3600 Series Reference Manual page 796

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
authentication mac-move deny
no authentication mac-move deny
Parameters
None.
Default
By default, this option is disabled.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
This command control whether to allow authenticated hosts to do roaming across different switch ports.
This command only controls whether a host which is authenticated at a port set to multi-auth mode is
allowed to move to another port.
If a station is allowed to move, there are two situations. It may either need to be re-authenticated or
directly moved to the new port without re-authentication based on the following rule. If the new port has
the same authentication configuration as the original port, then re-authentication is not needed. The host
will inherit the same authorization attributes with new port. The authenticated host can do roaming from
port 1 to port 2, and inherit the authorization attributes without re-authentication. If the new port has the
different authentication configuration as the original port, then re-authentication is needed. The
authenticated host on port 1 can move and re-authenticated by port 2. If the new port has no
authentication method enabled, then the station is directly moved to the new port. The session with the
original port is removed. The authenticated host on port 1 can be moved to port 2.
If MAC move is disabled and an authenticated host moves to another port, then this is treated as a
violation error.
Example
This example shows how to enable MAC move on a switch.
Switch# configure terminal
Switch(config)# authentication mac-move deny
Switch(config)#
69-12 authorization disable
This command is used to disable the acceptance of the authorized configuration. Use the no form to
enable the acceptance of the authorized configuration.
authorization disable
no authorization disable
Parameters
None.
Default
796