LevelOne FGL-2870 - Manual (Page 526)

Command Line Interface
4-160
4
Network Access (MAC Address Authentication)
Network Access authentication controls access to the network by authenticating the
MAC address of each host that attempts to connect to a switch port. Traffic received
from a specific MAC address is forwarded by the switch only if the source MAC
address is successfully authenticated by a central RADIUS server. While
authentication for a MAC address is in progress, all traffic is blocked until
authentication is completed. On successful authentication, the RADIUS server may
optionally assign VLAN and QoS settings for the switch port.
Table 4-43 Network Access
Command Function Mode Page
network-access aging Enables MAC address aging GC 4-161
network-access mac-filter Adds a MAC address to a filter table GC 4-161
network-access
port-mac-filter
Enables the specified MAC address filter IC 4-162
network-access
max-mac-count
Sets a maximum number for authenticated MAC
addresses on an interface
IC 4-162
network-access mode Enables MAC authentication on an interface IC 4-163
mac-authentication
reauth-time
Sets the time period after which a connected MAC
address must be re-authenticated
GC 4-164
mac-authentication
max-mac-count
Sets a maximum number for mac-authentication
authenticated MAC addresses on an interface
IC 4-165
mac-authentication
intrusion-action
Determines the port response when a connected host fails
MAC authentication.
IC 4-165
network-access dynamic-vlan Enables dynamic VLAN assignment from a RADIUS
server
IC 4-166
network-access guest-vlan Specifies the guest VLAN IC 4-166
network-access dynamic-qos Enables the dynamic quality of service feature IC 4-167
network-access
link-detection
Enables the link detection feature IC 4-166
network-access
link-detection link-down
Configures the link detection feature to detect and act
upon link-down events
IC 4-166
network-access
link-detection link-up
Configures the link detection feature to detect and act
upon link-up events
IC 4-166
network-access
link-detection link-up-down
Configures the link detection feature to detect and act
upon both link-up and link-down events
IC 4-166
clear network-access Clears authenticated MAC addresses from the address
table
PE 4-170
show network-access Displays the MAC authentication settings for port
interfaces
PE 4-170
show network-access
mac-address-table
Displays information for entries in the secure MAC
address table
PE 4-171
show network-access
mac-filter
Displays information for entries in the MAC filter tables PE 4-172