C
HAPTER
24
| General Security Measures
Network Access (MAC Address Authentication)
– 674 –
network-access
max-mac-count
Use this command to set the maximum number of MAC addresses that can
be authenticated on a port interface via all forms of authentication. Use the
no form of this command to restore the default.
SYNTAX
network-access max-mac-count count
no network-access max-mac-count
count - The maximum number of authenticated IEEE 802.1X and
MAC addresses allowed. (Range: 0-1024; 0 for unlimited)
DEFAULT SETTING
1024
COMMAND MODE
Interface Configuration
COMMAND USAGE
The maximum number of MAC addresses per port is 1024, and the
maximum number of secure MAC addresses supported for the switch
system is 1024. When the limit is reached, all new MAC addresses are
treated as authentication failures.
EXAMPLE
Console(config-if)#network-access max-mac-count 5
Console(config-if)#
network-access
mode
mac-authentication
Use this command to enable network access authentication on a port. Use
the no form of this command to disable network access authentication.
SYNTAX
[no] network-access mode mac-authentication
DEFAULT SETTING
Disabled
COMMAND MODE
Interface Configuration
COMMAND USAGE
â—† When enabled on a port, the authentication process sends a Password
Authentication Protocol (PAP) request to a configured RADIUS server.
The user name and password are both equal to the MAC address being
authenticated.
â—† On the RADIUS server, PAP user name and passwords must be
configured in the MAC address format XX-XX-XX-XX-XX-XX (all in upper
case).
To Next Page
Loading...
Need help?
General