Web and MAC Authentication
Configuring MAC Authentication on the Switch
Syntax: aaa port-access mac-based [e] < port-list > [unauth-vid <vid>]
no aaa port-access mac-based [e] < port-list > [unauth-vid]
Specifies the VLAN to use for a client that fails authen-
tication. If unauth-vid is 0, no VLAN changes occur.
Use the no form of the command to set the unauth-vid to 0.
(Default: 0)
Show Commands for MAC-Based Authentication
Command Page
show port-access mac-based [port-list] 3-37
show port-access mac-based clients [port-list] 3-37
show port-access mac-based clients <port-list> detailed 3-38
show port-access mac-based config [port-list] 3-39
show port-access mac-based config <port-list> detailed 3-40
show port-access mac-based config [port-list] auth-server 3-41
Syntax: show port-access mac-based [port-list]
Displays the status of all ports or specified ports that are
enabled for MAC authentication. The information displayed
for each port includes:
• Number of authorized and unauthorized clients
• VLAN ID number of the untagged VLAN used. If the switch
supports MAC-based (untagged) VLANs, MACbased is
displayed to show that multiple untagged VLANs are
configured for authentication sessions.
• If tagged VLANs (statically configured or RADIUS-
assigned) are used (Yes or No)
• If client-specific per-port CoS (Class of Service) values are
configured (Yes or No) or the numerical value of the CoS
(802.1p priority) applied to all inbound traffic. For client-
specific per-port CoS values, enter the show port-access
web-based clients detailed command.
• If per-port rate-limiting for inbound traffic is applied (Yes
or No) or the percentage value of the port’s available
bandwidth applied as a rate-limit value.
• If RADIUS-assigned ACLs are applied
Information on ports not enabled for MAC authentication is
not displayed.
3-36
To Next Page
Loading...
Need help?
General
