C
HAPTER
25
| General Security Measures
Network Access (MAC Address Authentication)
– 879 –
Current MAC Count : 0
MAC Filter ID : Disabled
Last Intrusion MAC : NA
Last Time Detected Intrusion MAC : NA
Console#
This example shows information about a detected intrusion.
Console#show port security interface ethernet 1/2
Global Port Security Parameters
Secure MAC aging mode : Disabled
Port Security Details
Port : 1/2
Port Security : Enabled
Port Status : Secure/Up
Intrusion Action : None
Max-MAC-Count : 0
Current MAC Count : 0
MAC Filter : Enabled
MAC Filter ID : 1
Last Intrusion MAC : 00-10-22-00-00-01
Last Time Detected Intrusion MAC : 2010/7/29 15:13:03
Console#
NETWORK ACCESS (MAC ADDRESS AUTHENTICATION)
Network Access authentication controls access to the network by
authenticating the MAC address of each host that attempts to connect to a
switch port. Traffic received from a specific MAC address is forwarded by
the switch only if the source MAC address is successfully authenticated by
a central RADIUS server. While authentication for a MAC address is in
progress, all traffic is blocked until authentication is completed. Once
successfully authenticated, the RADIUS server may optionally assign VLAN
and QoS settings for the switch port.
Table 89: Network Access Commands
Command Function Mode
network-access aging Enables MAC address aging GC
network-access mac-filter Adds a MAC address to a filter table GC
mac-authentication
reauth-time
Sets the time period after which a connected MAC
address must be re-authenticated
GC
network-access dynamic-qos Enables the dynamic quality of service feature IC
network-access dynamic-vlan Enables dynamic VLAN assignment from a RADIUS
server
IC
network-access guest-vlan Specifies the guest VLAN IC
network-access link-detection Enables the link detection feature IC
network-access link-detection
link-down
Configures the link detection feature to detect and
act upon link-down events
IC
To Next Page
Loading...
Need help?
General
