beautypg.com

4 show mac-address-table gmrp, 10 port-based network access control commands, 1 authentication login – Kontron AT8902 Full Size CLI User Manual

Page 71: Show mac-address-table gmrp - 37, 10 port-based network access control commands - 37, 1 authentication login - 37

background image

AT8901/2/3

Page 2 - 37

AT8901/2/3 CLI Reference Manual

600 centiseconds (0.2 to 6.0 seconds). The factory default is 60 centi-
seconds (0.6 seconds).

LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are

generated. A LeaveAll PDU indicates that all registrations will shortly
be deregistered. Participants will need to rejoin in order to maintain
registration. There is an instance of this timer on a per-Port, per-GARP
participant basis. The Leave All Period Timer is set to a random value
in the range of LeaveAllTime to 1.5*LeaveAllTime. Permissible val-
ues are 200 to 6000 centiseconds (2 to 60 seconds). The factory default
is 1000 centiseconds (10 seconds).

Port GMRP Mode Indicates the GMRP administrative mode for the port. It may be

enabled or disabled. If this parameter is disabled, Join Time, Leave
Time and Leave All Time have no effect.

2.9.4

show mac-address-table gmrp

This command displays the GMRP entries in the Multicast Forwarding Database
(MFDB) table.

Format

show mac-address-table gmrp

Mode

Privileged EXEC

Mac Address A unicast MAC address for which the switch has forwarding and or

filtering information. The format is 6 or 8 two-digit hexadecimal num-
bers that are separated by colons, for example 01:23:45:67:89:AB. In
an IVL system the MAC address is displayed as 8 bytes.

Type

Displays the type of the entry. Static entries are those that are config-
ured by the end user. Dynamic entries are added to the table as a result
of a learning process or protocol.

Description The text description of this multicast table entry.
Interfaces

The list of interfaces that are designated for forwarding (Fwd:) and fil-
tering (Flt:).

2.10

Port-Based Network Access Control Commands

This section describes the commands you use to configure port-based network access
control (802.1x). Port-based network access control allows you to permit access to
network services only to and devices that are authorized and authenticated.

2.10.1

authentication login

This command creates an authentication login list. The

is any character

string and is not case sensitive. Up to 10 authentication login lists can be configured on
the switch. When a list is created, the authentication method “local” is set as the first
method.

When the optional parameters “Option1”, “Option2” and/or “Option3” are used, an
ordered list of methods are set in the authentication login list. If the authentication
login list does not exist, a new authentication login list is first created and then the
authentication methods are set in the authentication login list. The maximum number