Edge-Core AS6700-32X - Mac-Authentication Intrusion-Action

Chapter 8 | General Security Measures
Network Access (MAC Address Authentication)
– 271 –
Command Mode
Interface Configuration
Command Mode
◆ Entries in the MAC address filter table can be configured with the network-
access mac-filter command.
◆ Only one filter table can be assigned to a port.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access port-mac-filter 1
Console(config-if)#
mac-authentication
intrusion-action
Use this command to configure the port response to a host MAC authentication
failure. Use the no form of this command to restore the default.
Syntax
mac-authentication intrusion-action {block traffic | pass traffic}
no mac-authentication intrusion-action
Default Setting
Block Traffic
Command Mode
Interface Con figuration
Example
Console(config-if)#mac-authentication intrusion-action block-traffic
Console(config-if)#
mac-authentication
max-mac-count
Use this command to set the maximum number of MAC addresses that can be
authenticated on a port via MAC authentication. Use the no form of this command
to restore the default.
Syntax
mac-authentication max-mac-count count
no mac-authentication max-mac-count
count - The maximum number of MAC-authenticated MAC addresses
allowed. (Range: 1-1024)
Default Setting
1024