C
HAPTER
24
| General Security Measures
Network Access (MAC Address Authentication)
– 877 –
◆ When used with 802.1X authentication, the intrusion-action must be
set for “guest-vlan” to be effective (see the dot1x intrusion-action
command).
EXAMPLE
Console(config)#interface ethernet 1/1
Console(config-if)#network-access guest-vlan 25
Console(config-if)#
network-access
link-detection
Use this command to enable link detection for the selected port. Use the
no form of this command to restore the default.
SYNTAX
[no] network-access link-detection
DEFAULT SETTING
Disabled
COMMAND MODE
Interface Configuration
EXAMPLE
Console(config)#interface ethernet 1/1
Console(config-if)#network-access link-detection
Console(config-if)#
network-access
link-detection
link-down
Use this command to detect link-down events. When detected, the switch
can shut down the port, send an SNMP trap, or both. Use the no form of
this command to disable this feature.
SYNTAX
network-access link-detection link-down
action [shutdown | trap | trap-and-shutdown]
no network-access link-detection
action - Response to take when port security is violated.
shutdown - Disable port only.
trap - Issue SNMP trap message only.
trap-and-shutdown - Issue SNMP trap message and disable
the port.
DEFAULT SETTING
Disabled