1-5
mac-authentication interface
Syntax
mac-authentication interface
interface-list
undo mac-authentication interface
interface-list
View
System view
Parameters
interface-list
: List of Ethernet ports. You can specify multiple Ethernet ports by providing this argument
in the form of
interface-list =
{
interface-type interface-number
[
to
interface-type interface-number
] }
&<1-10>, where &<1-10> means that you can provide up to 10 port indexes/port index ranges for this
argument.
Description
Use the
mac-authentication interface
command to enable the MAC address authentication for on the
specified port(s).
Use the
undo mac-authentication interface
command to disable the MAC address authentication for
the specified port(s).
By default, MAC address authentication is disabled on a port.
z
This command is essential for MAC address authentication to work on a port or on particular ports
after MAC address authentication is globally enabled.
z
You cannot configure the maximum number of dynamic MAC address entries for a port (through
the
mac-address max-mac-count
command) with MAC address authentication enabled.
Likewise, you cannot enable the MAC address authentication feature on a port with a limit of
dynamic MAC addresses configured.
z
If you have enabled MAC address authentication on a port, you cannot add the port to an
aggregation group. If a port is already added to an aggregation group, you cannot enable MAC
address authentication on the port.
Examples
# Enable MAC address authentication for Ethernet1/0/1 port.
<Sysname> system-view
System View: return to User View with Ctrl+Z.
[Sysname] mac-authentication interface Ethernet 1/0/1