Extreme Networks EAS 200-24p Switch, Manual

Page: 509 / 908

config mac_based_access_control ports
Extreme Networks EAS 200-24p Switch CLI Manual
509
config mac_based_access_control ports
Description
This command allows configures MAC-based Access Control port’s setting.
When the MAC-based Access Control function is enabled for a port and the port is not a MAC-based
Access Control guest VLAN member, the user who is attached to this port will not be forwarded unless
the user passes the authentication.
●
A user that does not pass the authentication will not be serviced by the switch.
●
If the user passes the authentication, the user will be able to forward traffic operated under the
assigned VLAN.
When the MAC-based Access Control function is enabled for a port, and the port is a MAC-based
Access Control guest VLAN member, the port(s) will be removed from the original VLAN(s) member
ports, and added to MAC-based Access Control guest VLAN member ports.
●
Before the authentication process starts, the user is able to forward traffic under the guest VLAN.
●
After the authentication process, the user will be able to access the assigned VLAN.
If the port authorize mode is port based mode, when the port has been moved to the authorized VLAN,
the subsequent users will not be authenticated again. They will operate in the current authorized
VLAN.
If the port authorize mode is host based mode, then each user will be authorized individually and be
capable of getting its own assigned VLAN.
If port’s block time is set to” infinite”, it means that a failed authentication client will never be blocked.
Block time will be set to “0”.
Format
config mac_based_access_control ports [<portlist> | all] {state [enable |
disable] | mode [port_based | host_based] | aging_time [infinite | <min 1-
1440>] | block_time <sec 0-300> | max_users [<value 1-1000> | no_limit]}(1)
Parameters
●
ports - Specifies a range of ports for configuring the MAC-based Access Control function
parameters.
●
<portlist> - Enter the list of port used for this configuration here.
●
all - Specifies all existed ports of switch for configuring the MAC-based Access Control function
parameters.
●
state - (Optional) Specifies whether the port’s MAC-based Access Control function is enabled or
disabled.
●
enable - Specifies that the port's MAC-based Access Control states will be enabled.
●
disable - Specifies that the port's MAC-based Access Control states will be disabled.
●
mode - (Optional) Specifies the MAC-based access control port mode used.