MAC-based Access Control Commands
Extreme Networks EAS 100-24t Switch CLI Manual
281
Example usage
To configure the MAC-based access control method:
Example usage:
To configure a port state for MAC-based access control:
#config mac_based_access_control method local
Command: config mac_based_access_control method local
Success.
#
config mac_based_access_control ports
Purpose Used to configure the parameters of the MAC-based access control.
Syntax config mac_based_access_control ports [<portlist> | all] {state [enable |
disable] | aging_time [infinite | <min 1-1440>] | hold_time [infinite | <sec
1-300>] | max_users [no_limit | <value 1-128>]}
Description This command is used to configure the parameters of the MAC-based access
control setting. When the MAC-AC function is enabled for a port, and the
guest VLAN function for this port is disabled, the user attached to this port will
not be forwarded unless the user pass the authentication. The user that does
not pass the authentication will not be serviced by the switch. If the user
passes the authentication, the user will be able to forward traffic operated
under the original VLAN configuration.
Parameters
ports - A range of ports that are enabled or disabled for the MAC-based
access control function.
state - Specify whether MAC AC function is enabled or disabled.
aging_time - A time period during which an authenticated host will be kept in
an authenticated state. When the aging time is timed-out, the host will be
moved back to an unauthenticated state.
hold_time - If a host fails to pass the authentication, the next authentication
will not start within the hold time unless the user clears the entry state
manually.
max_users - A threshold of maximum authorized client(s).
Restrictions
Only Administrator-level users can issue this command.
#config mac_based_access_control ports 1-8 state enable
Command: config mac_based_access_control ports 1-8 state enable
Success.
#
clear mac_based_access_control auth_mac
Purpose Used to reset the current state of a user. The re-authentication will be started
after the user traffic is received again.