Chapter 9
| General Security Measures
Network Access (MAC Address Authentication)
– 315 –
◆ When used with 802.1X authentication, the intrusion-action must be set for
“guest-vlan” to be effective (see the dot1x intrusion-action command).
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access guest-vlan 25
Console(config-if)#
network-access
link-detection
Use this command to enable link detection for the selected port. Use the no form of
this command to restore the default.
Syntax
[no] network-access link-detection
Default Setting
Disabled
Command Mode
Interface Configuration
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access link-detection
Console(config-if)#
network-access link-
detection link-down
Use this command to detect link-down events. When detected, the switch can shut
down the port, send an SNMP trap, or both. Use the no form of this command to
disable this feature.
Syntax
network-access link-detection link-down
action [shutdown | trap | trap-and-shutdown]
no network-access link-detection
action - Response to take when port security is violated.
shutdown - Disable port only.
trap - Issue SNMP trap message only.
trap-and-shutdown - Issue SNMP trap message and disable the port.
Default Setting
Disabled
To Next Page
Loading...
