Digi IX20 - Page 189

Interfaces Local Area Networks(LANs)
IX20 User Guide
189
enable true Enable
(config network interface my_lan)>
d. Modify any of the remaining default settings as appropriate. For example, to change the
minimum length of the prefix:
(config network interface my_lan)> ipv6 prefix_length 60
(config network interface my_lan)>
If the minimum length is not available, then a longer prefix will be used.
See Configure WAN/WWAN priority and default route metrics for further information about
metrics.
8. (Optional) To configure 802.1x port based network access control:
Note The IX20 can function as an 802.1x authenticator; it doesnot function as an 802.1x
supplicant.
a. Enable the 802.1x authenticator on the IX20 device:
(config network interface my_lan)> 802_1x authentication enable true
(config network interface my_lan)>
b. Set the frequency period for reauthorization:
(config network interface my_lan)> 802_1x authentication reauth_period
value
(config network interface my_lan)>
where value is an integer between 0 and 86400. The default is 3600.
9. (Optional) Configure the MACaddressdeny list.
Incoming packets will be dropped from any deviceswhose MACaddressesisincluded in the
MACaddress denylist.
a. Add a MAC addressto the denylist:
(config network interface my_lan)> add mac_denylist end mac_address
(config network interface my_lan)>
where mac_addressisa hyphen-separated MACaddress, for example, 32-A6-84-2E-81-58.
b. Repeat for each additional MAC address.
10. (Optional) Configure the MACaddressallowlist.
If allowlist entriesare specified, incoming packets will only be accepted from the listed MAC
addresses.
a. Add a MAC addressto the allowlist:
(config network interface my_lan)> add mac_allowlist end mac_address
(config network interface my_lan)>
where mac_addressisa hyphen-separated MACaddress, for example, 32-A6-84-2E-81-58.