Network Access (Mac Address Authentication); Table 68: Network Access Commands - Edge-Core ECS4610-24F Management Manual

N A
ETWORK CCESS
(MAC A A
DDRESS UTHENTICATION
Network Access authentication controls access to the network by
authenticating the MAC address of each host that attempts to connect to a
switch port. Traffic received from a specific MAC address is forwarded by
the switch only if the source MAC address is successfully authenticated by
a central RADIUS server. While authentication for a MAC address is in
progress, all traffic is blocked until authentication is completed. Once
successfully authenticated, the RADIUS server may optionally assign VLAN
and QoS settings for the switch port.

Table 68: Network Access Commands

Command
network-access aging
network-access mac-filter
mac-authentication reauth-
time
network-access dynamic-qos
network-access dynamic-vlan
network-access guest-vlan
network-access link-detection
network-access link-detection
link-down
network-access link-detection
link-up
network-access link-detection
link-up-down
network-access max-mac-
count
network-access mode mac-
authentication
network-access port-mac-
filter
mac-authentication intrusion-
action
mac-authentication max-
mac-count
show network-access
show network-access mac-
address-table
show network-access mac-
filter
C
HAPTER

Network Access (MAC Address Authentication)

)
Function
Enables MAC address aging
Adds a MAC address to a filter table
Sets the time period after which a connected MAC
address must be re-authenticated
Enables the dynamic quality of service feature
Enables dynamic VLAN assignment from a RADIUS
server
Specifies the guest VLAN
Enables the link detection feature
Configures the link detection feature to detect and
act upon link-down events
Configures the link detection feature to detect and
act upon link-up events
Configures the link detection feature to detect and
act upon both link-up and link-down events
Sets the maximum number of MAC addresses that
can be authenticated on a port via all forms of
authentication
Enables MAC authentication on an interface
Enables the specified MAC address filter
Determines the port response when a connected
host fails MAC authentication.
Sets the maximum number of MAC addresses that
can be authenticated on a port via MAC
authentication
Displays the MAC authentication settings for port
interfaces
Displays information for entries in the secure MAC
address table
Displays information for entries in the MAC filter
tables
– 711 –
| General Security Measures
28
Mode
GC
GC
GC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
IC
PE
PE
PE