Chapter 9: Security
Extreme Networks EAS 100-24t Switch CLI Manual
286
To display MAC-based access control local databases by MAC address:
To display MAC-based access control local databases by VLAN:
Example usage:
● MAC 00-00-00-00-00-01 is authenticated without a VLAN assigned (the specified target VLAN might
not exist or a target VLAN has not been specified). The ID of RX VLAN will be displayed (the RX
VLAN ID is 4004 in this example).
● MAC 00-00-00-00-00-02 is authenticated with a target VLAN assigned. The ID of the target VLAN
will be displayed (target VLAN ID is 1234 in this example).
● MAC 00-00-00-00-00-03 failed to pass authentication, and packets with SA 00-00-00-00-00-03 will be
dropped no matter which VLAN these packets are from.
#show mac_based_access_control_local mac 00-00-00-00-00-01
Command: show mac_based_access_control_local mac 00-00-00-00-00-01
MAC Address VLAN Name VID
----------------- ---------------------- ------
00-00-00-00-00-01 default 1
Total Entries: 1
#
#show mac_based_access_control_local vlan default
Command: show mac_based_access_control_local vlan default
MAC Address VLAN Name VID
----------------- ---------------------- ------
00-00-00-00-00-01 default 1
00-00-00-00-00-04 default 1
Total Entries: 2
#
show mac_based_access_control auth_mac
Purpose Used to display the MAC-based access control authentication state.
Syntax show mac_based_access_control auth_mac {ports <portlist>}
Description This command is used to display the MAC-based access control
authentication state.
Parameters ports – Display authentication status by port.
Restrictions None.