Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 350 / 698

Network Login
ExtremeWare XOS 11.3 Concepts Guide
350
Enabling or Disabling Network Login on the Switch
To enable or disable network login, use one of the following commands and specify the authentication
method:
enable netlogin [{dot1x} {mac} {web-based}]
disable netlogin [{dot1x} {mac} {web-based}]
By default netlogin is disabled.
Enabling or Disabling Network Login on a Specific Port
To enable network login on a port, use the following command to specify the ports and the
authentication method:
enable netlogin ports <portlist> [{dot1x} {mac} {web-based}]
By default, all methods of network login are disabled on all ports.
Network login must be disabled on a port before you can delete a VLAN that contains that port. To
disable network login, use the following command:
disable netlogin ports <portlist> [{dot1x} {mac} {web-based}]
Configuring the Move Fail Action
If network login fails to perform Campus mode login, you can configure the switch to authenticate the
client in the original VLAN or deny authentication even if the user name and password are correct. For
example, this may occur if a destination VLAN does not exist. To configure the behavior of network
login if a VLAN move fails, use the following command:
configure netlogin move-fail-action [authenticate | deny]
By default, the setting is deny.
The following describes the parameters of this command if two clients want to move to a different
untagged VLAN on the same port:
●
authenticate
—Network login authenticates the first client that requests a move and moves that
client to the requested VLAN. Network login authenticates the second client but does not move that
client to the requested VLAN. The second client moves to the first client’s authenticated VLAN.
●
deny
—Network login authenticates the first client that requests a move and moves that client.
Network login does not authenticate the second client.
Displaying Network Login Settings
To display the network login settings and parameters, use the following command:
show netlogin {port <portlist> vlan <vlan_name>} {dot1x {detail}} {mac} {web-based}