Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 369 / 698

MAC-Based Authentication
ExtremeWare XOS 11.3 Concepts Guide
369
●
Secure MAC Configuration Example on page 370
●
MAC-Based Network Login Configuration Example on page 371
Enabling and Disabling MAC-Based Network Login
To enable MAC-based network login on the switch, use the following command:
enable netlogin mac
Any combination of types of authentication can be enabled on the same switch. At least one of the
authentication types must be specified on the CLI.
To disable MAC-based network login on the switch, use the following command:
disable netlogin mac
To enable MAC-based network login on one or more ports, use the following command:
enable netlogin ports <portlist> mac
Network Login must be disabled on a port before you can delete a VLAN that contains that port. To
disable MAC-based network login on one or more ports, use the following command:
disable netlogin ports <portlist> mac
Associating a MAC Address to a Specific Port
You can configure the switch to accept and authenticate a client with a specific MAC address. Only
MAC addresses that have a match for the specific ports are sent for authentication. For example, if you
associate a MAC address with one or more ports, only authentication requests for that MAC address
received on the port(s) are sent to the configured RADIUS server or local database. The port(s) block all
other authentication requests that do not have a matching entry. This is also known as secure MAC.
To associate a MAC address with one or more ports, specify the
ports
option when using the following
command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} {<password>}
{ports <port_list>}
You must enable MAC-based netlogin on the switch and the specified ports. If MAC-based netlogin is
not enabled on the specified port(s), the switch displays a warning message similar to the following:
WARNING: Not all specified ports have MAC-Based NetLogin enabled.
For a sample configuration, see “Secure MAC Configuration Example” on page 370 .
Adding and Deleting MAC Addresses
To add a MAC address to the table, use the following command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} {<password>}
{ports <port_list>}