188
[Device] port-security enable
# Add five OUI values. (You can add up to 16 OUI values. The port permits only one user
matching one of the OUIs to pass authentication.)
[Device] port-security oui index 1 mac-address 1234-0100-1111
[Device] port-security oui index 2 mac-address 1234-0200-1111
[Device] port-security oui index 3 mac-address 1234-0300-1111
[Device] port-security oui index 4 mac-address 1234-0400-1111
[Device] port-security oui index 5 mac-address 1234-0500-1111
# Set the port security mode to userLoginWithOUI.
[Device] interface ten-gigabitethernet 1/0/1
[Device-Ten-GigabitEthernet1/0/1] port-security port-mode userlogin-withoui
[Device-Ten-GigabitEthernet1/0/1] quit
Verifying the configuration
# Verify the RADIUS scheme configuration.
[Device] display radius scheme radsun
RADIUS Scheme Name : radsun
Index : 0
Primary Auth Server:
IP : 192.168.1.2 Port: 1812 State: Active
VPN : Not configured
Primary Acct Server:
IP : 192.168.1.3 Port: 1813 State: Active
VPN : Not configured
Second Auth Server:
IP : 192.168.1.3 Port: 1812 State: Active
VPN : Not configured
Second Acct Server:
IP : 192.168.1.2 Port: 1813 State: Active
VPN : Not configured
Accounting-On function : Disabled
retransmission times : 50
retransmission interval(seconds) : 3
Timeout Interval(seconds) : 5
Retransmission Times : 5
Retransmission Times for Accounting Update : 5
Server Quiet Period(minutes) : 5
Realtime Accounting Interval(minutes) : 15
NAS IP Address : Not configured
VPN : Not configured
User Name Format : without-domain
Data flow unit : Byte
Packet unit : one
Attribute-15 check-mode : strict
# After users pass authentication, display port security configuration. Verify that port Ten-GigabitEthernet
1/0/1 allows only one 802.1X user to be authenticated.
[Device] display port-security interface ten-gigabitethernet 1/0/1
To Next Page
Loading...
