Edge-Core ES3528MV2 - Mac-Authentication Intrusion-Action; Network-Access Port-Mac-Filter

C HAPTER 25 | General Security Measures
Network Access (MAC Address Authentication)
– 889 –
network-access
port-mac-filter
Use this command to enable the specified MAC address filter. Use the no
form of this command to disable the specified MAC address filter.
SYNTAX
network-access port-mac-filter filter-id
no network-access port-mac-filter
filter-id - Specifies a MAC address filter table. (Range: 1-64)
DEFAULT SETTING
None
COMMAND MODE
Interface Configuration
COMMAND MODE
◆ Entries in the MAC address filter table can be configured with the
network-access mac-filter command.
◆ Only one filter table can be assigned to a port.
EXAMPLE
Console(config)#interface ethernet 1/1
Console(config-if)#network-access port-mac-filter 1
Console(config-if)#
mac-authentication
intrusion-action
Use this command to configure the port response to a host MAC
authentication failure. Use the no form of this command to restore the
default.
SYNTAX
mac-authentication intrusion-action {block traffic | pass traffic}
no mac-authentication intrusion-action
DEFAULT SETTING
Block Traffic
COMMAND MODE
Interface Con figuration
EXAMPLE
Console(config-if)#mac-authentication intrusion-action block-traffic
Console(config-if)#