ELTEX MES23xx, Operation Manual

Page: 153 / 208

MES53xx, MES33xx, MES23xx Ethernet Switch Series 153
console(config)# interface tengigabitethernet 1/0/15
console(config-if)# port security
console(config-if)# port security max 1

Connect the client to a port and learn the MAC address.
console(config-if)# port security discard
console(config-if)# port security mode lock
11.1.2 Port-based client authentication (802.1x standard)
11.1.2.1 Basic authentication
Authentication based on 802.1x standard enables authentication of switch users via the external
server using the port that the client is connected to. Only authenticated and authorized users will be able
to send and receive the data. Port user authentication is performed by a RADIUS server via EAP (Extensible
Authentication Protocol).
Global configuration mode commands
Command line prompt in the global configuration mode is as follows:
console(config)#
Table 5.165. Global configuration mode commands
Command Value/Default value Action
dot1x system­auth­control
-/disabled
Enable 802.1X authentication mode on the switch.
no dot1x
system­auth­control Disable 802.1X authentication mode on the switch.
aaa authentication dot1x
default {none | radius}
[none | radius]
-/radius
Specify one or two AAA methods on the IEEE 802.1X
interfaces.
-
none - do not perform authentication;
- radius - use a RADIUS server list for user authentication.
The second authentication method is used only when
the first authentication method fails.
no aaa authentication
dot1x default Set the default value.
Ethernet interface configuration mode commands
Command line prompt in the Ethernet interface configuration mode is as follows:
console(config-if)#
EAP (Extensible Authentication Protocol) performs remote client authentication and
defines the authentication method.