background image

AX1240S-AP-0202C_R2X 

22

 

(config-vlan)# exit 

Sets a MAC address of a terminal excluded from authentication (MAC address of shared server: 

1234.5600.e001 in the figure) to MAC VLAN ID 200. 

2.

 

(config)# interface fastethernet 0/5 

(config-if)# switchport mode mac-vlan 

(config-if)# switchport mac vlan 200 

(config-vlan)# exit 

Specifies MAC VLAN ID 200 to which the excluded terminal belongs for an authentication port. 

3.

 

(config)# mac-address-table static 1234.5600.e001 vlan 200 interface fastethernet 

0/5 

Sets the MAC address (MAC address of shared server: 1234.5600.e001 in the figure) of a terminal 

permitted to connect but exempt from authentication with port 0/5 in MAC VLAN ID 200 to the MAC 

address table. 

Note 

Before adding the terminal excluded from authentication to the MAC address table, set the VLAN ID of 

MAC VLAN to the port to which the terminal belongs. 

 

3.  Changes in Configuration Command Reference (for 

Ver. 2.2) (AX1240S-S003-30X) 

 

4. Login Security and RADIUS 

(1) aaa authentication login [Change] 

Descriptions of parameters and the notes have been corrected as follows. [Ver. 2.2.E and later] 

 

Before the change:

 

Parameters: 

<method>

[

<method>

Specify the following parameters for 

<method>

. You cannot specify the same 

<method>

 

more than once. 

group radius

 

RADIUS authentication is used. 

local

 

Local password authentication is used. 

Notes: 

None 

 

After the change:

 

Parameters: 

default 

<method>

[

<method>

]

 

Specify the following parameters for 

<method>

. You cannot specify the same 

<method>

 

more than once. 

group radius

 

RADIUS authentication is used. 

General-purpose RADIUS servers are used. 

local

 

Local password authentication is used. 

Summary of Contents for AX1240S Series

Page 1: ...AX1240S AP 0202C_R2X A AX X1 12 25 50 0S S A AX X1 12 24 40 0S S Software Manual Corrections For Ver 2 2 C 2 2 D 2 2 E Released September 2010 Edition 3...

Page 2: ...0S S003 30X January 2010 4 AX1250S AX1240S Software Manual Operation Command Reference for Ver 2 2 AX1240S S004 30X January 2010 5 AX1250S AX1240S Software Manual Message Log Reference for Ver 2 2 AX1...

Page 3: ...ommand Reference Corrections have been added to the descriptions of the show dot1x logging operation log Corrections have been added to the descriptions of the show web authentication logging operatio...

Page 4: ...Guide Vol 2 For Version 2 2 AX1240S S002 40X 11 3 Changes in Configuration Command Reference for Ver 2 2 AX1240S S003 30X 22 4 Changes in Operation Command Reference for Ver 2 2 AX1240S S004 30X 27 5...

Page 5: ...urity functionality 2 If you set a number of filter entries that exceeds the Switch capacity only the entries within the capacity limitations are applied 3 When the number of unauthenticated terminals...

Page 6: ...Authentication method sequence The rest omitted After the change You can specify more than one service that you wish to use for login authentication You can specify RADIUS authentication general purp...

Page 7: ...h the login security and Layer 2 authentication functionality Information of authentication dedicated RADIUS server IEEE 802 1X Web authentication MAC based authentication This information is only use...

Page 8: ...ng fan runs for about 10 minutes after the Switch is started After the change This functionality monitors the temperature in the Switch and if the Switch is located in a favorable environment that doe...

Page 9: ...d on on Yes Yes Disabled on off No No desired on on Yes Yes off Enabled Enabled on on Yes Yes Disabled off on No Yes desired on on Yes Yes Disabled Enabled on on No Yes Disabled off off No No desired...

Page 10: ...isabled off on Yes No desired on on Yes Yes Disabled Enabled on on Yes Yes Disabled off off No No desired on on Yes Yes desired Enabled on on Yes Yes Disabled off on Yes No desired on on Yes Yes desir...

Page 11: ...s 1000 1000000 100 Kbit s 2 64 960 64 Kbit s 3 1 1 M 1000 K 2 For values greater than 1000 K set them in 100 K increments 1000 K 1100 K 1200 K 10000000 K 3 For values that are less than 1000 K set th...

Page 12: ...t s 1 Kbit s 1000 1000000 100 Kbit s 2 64 960 64 Kbit s 3 1 1 M 1000 K 2 For values greater than 1000 K set them in 100 K increments 1000 K 1100 K 1200 K 10000000 K 3 For values that are less than 100...

Page 13: ...ity Change Table 6 4 Operational conditions of IEEE 802 1X has been corrected as follows Before the change Table 6 4 Operational conditions of IEEE 802 1X Category Port based authentication static Por...

Page 14: ...MAC VLAN Untagged Y N N Trunk port native Port VLAN Untagged N N N allowed Port VLAN MAC VLAN Tagged N N N Protocol port N N N MAC port native Port VLAN Untagged Y N N mac MAC VLAN Untagged N Y Y dot1...

Page 15: ...ow access VLAN ID 200 without performing IEEE 802 1X authentication After the change Configuration command example config vlan 200 mac based config vlan mac address 1234 5600 e001 config vlan exit Spe...

Page 16: ...entication is based on a user ID and password that a user supplies through an ordinary Web browser such as Internet Explorer abbreviated hereafter to Web browser The Switches change the status of the...

Page 17: ...see 5 4 4 Auto authentication mode accommodation at the same MAC port 8 3 Dynamic VLAN mode 8 3 2 Authentication functionality Change 7 Roaming moving authenticated terminals between ports Change The...

Page 18: ...cation exclusion terminal configuration Configuration command example has been corrected as follows and notes have been added Before the change Configuration command example 1 config vlan 400 mac base...

Page 19: ...on to the MAC address table set the VLAN ID of MAC VLAN to the port to which the terminal belongs 10 Description of MAC based Authentication 10 1 Overview Change Table 10 2 Operating conditions of MAC...

Page 20: ...rts For more details see 5 4 4 Auto authentication mode accommodation at the same MAC port 10 3 Dynamic VLAN mode 10 3 2 Authentication functionality 8 Roaming moving authenticated terminals between p...

Page 21: ...n exclusion Change In b Terminals excluded from authentication Configuration command example has been corrected as follows and notes have been added Before the change Configuration command example 1 c...

Page 22: ...Before adding the terminal excluded from authentication to the MAC address table set the VLAN ID of MAC VLAN to the port to which the terminal belongs 3 Changes in Configuration Command Reference for...

Page 23: ...trol port cool standby Change The impact on communication and the notes have been corrected as follows Ver 2 2 E and later Before the change Impact on communication None Notes 1 If this command is set...

Page 24: ...r saving functionality disable auto negotiation and enable the automatic MDIX functionality mdix auto specified during operation 4 With the scheduled port power saving functionality enabled at the sch...

Page 25: ...1240sDot1xFailureTrap dot1x ax1240sDot1xEventTrap ax1240sWauthFailureTrap ax1240sWauthEventTrap web authentication ax1240sWauthSystemTrap ax1240sMauthFailureTrap ax1240sMauthEventTrap mac authenticati...

Page 26: ...inPowerUsageOnNotification poe pethMainPowerUsageOffNotificatio n ax1250sDot1xFailureTrap AX1250S ax1240sDot1xFailureTrap AX1240S ax1250sDot1xEventTrap AX1250S dot1x ax1240sDot1xEventTrap AX1240S ax12...

Page 27: ...S has been corrected as follows Before the change Figure 7 6 Operating condition level and temperature AX1240S After the change Figure 7 6 Operating condition level and temperature AX1240S Units degre...

Page 28: ...TICE LOGIN Login failed RADIUS authentication failed Re Auth Re authentication of a supplicant failed This log is collected due to no response from a terminal or a RADIUS authentication failure Action...

Page 29: ...re the change Table 27 12 List of log messages Log ID Log type Message text Description Number Authentication mode Additional information NORMAL LOGOUT Force logout Authentic method changed RADIUS Loc...

Page 30: ...rred during RADIUS authentication xxxxxxxx User name Action None WARN SESSION Authentication login xxxxxxxx RADIUS message queue error 5 An internal error message queue error response occurred during...

Page 31: ...CIST Root Bridge 14 The Switch became the CIST root bridge Action None WARN STP MST This bridge becomes the CIST Regional Root Bridge 15 The Switch became the CIST regional root bridge Action None Af...

Page 32: ...ckets IF Interface port number ChGr channel group Channel group number VLAN ID MAC_address IP_address DHCP server information VLAN ID VLAN ID MAC_address MAC address IP_address IP address Action Check...

Page 33: ...castPkts ifEntry 17 R O Standard The number of unicast packets sent by the upper layer Implementation Depends on the interface as follows When the ifIndex indicates a port Fixed value of 0 When the if...

Page 34: ...s Implemented Y N 16 dot1dStpPortEntry dot1dStpPortTable 1 NA Standard A list of spanning tree protocol status information for each port INDEX ifindex Implementation Same as the standard Y After the c...

Page 35: ...mented Y N 23 ax1250sTemperatureStatusNumber ax1250sChassisEntry 20 INTEGER R O Maximum number of temperature monitoring points in this chassis For AX1250S series Switches Fixed value of 1 Y 3 11 2 ax...

Page 36: ...N 23 ax1240sTemperatureStatusNumber ax1240sChassisEntry 20 INTEGER R O Maximum number of temperature monitoring points in this chassis For AX1240S Fixed value of 1 Y 3 14 2 ax1240sChassis group imple...

Page 37: ...configuration command N 20 ax1250sFrameErrorSendTrap AX1250S ax1240sFrameErrorSendTrap AX1240S A frame transmissio n error occurred This trap is issued when a frame transmission error occurs The sett...

Reviews: