Network-Access Port-Mac-Filter - Edge-Core ECS4610-24F Management Manual

| General Security Measures
C 28
HAPTER
Network Access (MAC Address Authentication)
network-access
port-mac-filter
When port status changes to down, all MAC addresses are cleared from
◆
the secure MAC address table. Static VLAN assignments are not
restored.
The RADIUS server may optionally return a VLAN identifier list. VLAN
◆
identifier list is carried in the "Tunnel-Private-Group-ID" attribute. The
VLAN list can contain multiple VLAN identifiers in the format "1u,2t,"
where "u" indicates untagged VLAN and "t" tagged VLAN. The "Tunnel-
Type" attribute should be set to "VLAN," and the "Tunnel-Medium-Type"
attribute set to "802."
E
XAMPLE
Console(config-if)#network-access mode mac-authentication
Console(config-if)#
Use this command to enable the specified MAC address filter. Use the no
form of this command to disable the specified MAC address filter.
S
YNTAX
network-access port-mac-filter filter-id
no network-access port-mac-filter
filter-id - Specifies a MAC address filter table. (Range: 1-64)
D S
EFAULT ETTING
None
C M
OMMAND ODE
Interface Configuration
C M
OMMAND ODE
◆ Entries in the MAC address filter table can be configured with the
network-access mac-filter
◆ Only one filter table can be assigned to a port.
E
XAMPLE
Console(config)#interface ethernet 1/1
Console(config-if)#network-access port-mac-filter 1
Console(config-if)#
– 720 –
command.