Extreme Networks ExtremeWare 7.7, Command Reference Manual

Page: 978 / 2620

978 ExtremeWare 7.7 Command Reference Guide
Security Commands
create trusted-mac-address
For the “ i ” switches:
create trusted-mac-address {mac-address} <xx:yy:zz:aa:bb:cc> {mask
<dd:ee:ff:gg:hh:kk>} vlan <vlan-name | all> {port <portlist>}
{protocol[DHCP|ARP]}
For the “ e ” switches:
create trusted-mac-address mac-address <mac_address> [mask <mask>] vlan
<vlan_name>| all [ports <portlist>] [protocol {DHCP|ARP}]
Description
Configures a trusted media access control (MAC) address with mask for each VLAN or all VLANs for
the ARP or DHCP protocols.
Syntax Description
Default
Protocol type is DHCP if the protocol option is omitted.
If the port list is not specified, the trusted MAC is applied to all ports in the selected VLAN.
Usage Guidelines
Use this command to configure a trusted MAC address. The
mask
keyword is optional. If you do not
specify a mask, the default mask of ff:ff:ff:ff:ff:ff is used. This command is equivalent to configuring an
individual MAC address.
If you do not specify a port list, the trusted MAC is applied to all the ports in the VLAN. Devices
matching a created trusted-OUI list are allowed to bypass network login using a specified protocol.
ExtremeWare performs an AND operation between the source MAC address of the incoming packet
and its mask. It then compares that result with the result of the AND operation between the configured
address and the mask. If the results are the same, the address is trusted and the packet is forwarded
independent of the port authentication state.
<xx:yy:zz:aa:bb:cc>
or
mac_address
Specifies the MAC address for enabling the trusted-MAC feature. The format for
either is xx:yy:zz:aa:bb:cc.
mask <dd:ee:ff:gg:hh:kk>
or
mask
Specifies the MAC address mask value. If a mask is not specified, the default mask
of ff:ff:ff:ff:ff:ff is used.
vlan-name Specifies the name of the VLAN to be configured. If the
all
keyword is specified.
all Specifies that all VLANs are configured for trusted-MAC.
portlist Specifies one or more ports or slots and ports. On a modular switch, can be a list of
slots and ports. On a stand-alone switch, can be one or more port numbers. May be
in the form 1, 2, 3-5, 2:*, 2:5, 2:6-2:8.
DHCP Specifies DHCP for the protocol type. DHCP is the default protocol type.
ARP Specifies ARP for the protocol type.