C
HAPTER
25
| General Security Measures
Network Access (MAC Address Authentication)
– 664 –
mac-authentication
intrusion-action
Use this command to configure the port response to a host MAC
authentication failure. Use the no form of this command to restore the
default.
SYNTAX
mac-authentication intrusion-action {block traffic | pass traffic}
no mac-authentication intrusion-action
DEFAULT SETTING
Block Traffic
COMMAND MODE
Interface Con figuration
EXAMPLE
Console(config-if)#mac-authentication intrusion-action block-traffic
Console(config-if)#
mac-authentication
max-mac-count
Use this command to set the maximum number of MAC addresses that can
be authenticated on a port via MAC authentication. Use the no form of this
command to restore the default.
SYNTAX
mac-authentication max-mac-count count
no mac-authentication max-mac-count
count - The maximum number of MAC-authenticated MAC
addresses allowed. (Range: 1-1024)
DEFAULT SETTING
1024
COMMAND MODE
Interface Configuration
EXAMPLE
Console(config-if)#mac-authentication max-mac-count 32
Console(config-if)#