beautypg.com

Configuring mac-based vlan for a dynamic host, Configuring dynamic mac-based vlan – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 236

background image

4. To enable MAC-based VLAN on the port.

device(config)#interface e 0/1/1

device(config-if-e1000-0/1/1)#mac-authentication mac-vlan enable

5. To disable MAC-based VLAN on the port.

device(config)#interface e 0/1/1

device(interface-0/1/1)#mac-auth mac-vlan disable

6. To remove and disable the MAC-based VLAN configuration.

device(config)#interface e 0/1/1

device(config-if-e1000-0/1/1)#no mac-auth mac-vlan

Configuring MAC-based VLAN for a dynamic host

Follow the steps given below to configure MAC-based VLAN for a dynamic host.

1. Enable multi-device port authentication globally using the following command.

device(config)#mac-authentication enable

2. Add each port on which you want MAC-based VLAN enabled as mac-vlan-permit for a specific

VLAN.

device(config)#vlan 10 by port

device(config-vlan-10)#mac-vlan-permit ethernet 0/1/1 to 0/1/6

3. Enable MAC-based VLAN on the port.

device(config)#interface e 0/1/1

device(config-if-e1000-0/1/1)#mac-authentication mac-vlan enable

4. Disable MAC-based VLAN on the port.

device(config)#interface e 0/1/1

device(config-if-e1000-0/1/1)#mac-auth mac-vlan disable

5. Remove and disable the MAC-based VLAN configuration.

device(config)#interface e 0/1/1

device(config-if-e1000-0/1/1)#no mac-auth mac-vlan

Configuring dynamic MAC-based VLAN

To globally enable MAC-based VLAN globally (for all MAC-based VLAN ports), enter the following
commands.

device(config)#mac-authentication enable

device(config)#mac-authentication mac-vlan-dyn-activation

To configure Dynamic MAC-based VLAN to add a specific port to a specific VLAN, enter commands
similar to the following.

device(config)#vlan 10

device(config-vlan-10)#mac-vlan-permit e 0/1/35

Syntax: mac-vlan-permit ethernet stack-unit/slotnum/portnum

To disable Dynamic MAC-based VLAN, enter the following command.

device(config)#no mac-authentication mac-vlan-dyn-activation

Configuring MAC-based VLAN for a dynamic host

236

FastIron Ethernet Switch Security Configuration Guide

53-1003088-03