HP PROCURVE 2910AL, Access Security Manual

Page: 120 / 594

Web and MAC Authentication
Configuring MAC Authentication on the Switch
Syntax: aaa port-access mac-based [e] < port-list > [unauth-vid < vid >]
no aaa port-access mac-based [e] < port-list > [unauth-vid]
Specifies the VLAN to use for a client that fails authen­
tication. If
unauth-vid
is
0
, no VLAN changes occur.
Use the
no
form of the command to set the
unauth-vid
to
0
.
(Default: 0)
Show Commands for MAC-Based Authentication
Command Page
show port-access mac-based [ port-list ] 3-37
show port-access mac-based clients [ port-list ] 3-37
show port-access mac-based clients < port-list > detailed 3-38
show port-access mac-based config [ port-list ] 3-39
show port-access mac-based config < port-list > detailed 3-40
show port-access mac-based config [ port-list ] auth-server 3-41
Syntax: show port-access mac-based [ port-list ]
Displays the status of all ports or specified ports that are
enabled for MAC authentication. The information displayed
for each port includes:
• Number of authorized and unauthorized clients
• VLAN ID number of the untagged VLAN used. If the switch
supports MAC-based (untagged) VLANs,
MACbased
is
displayed to show that multiple untagged VLANs are
configured for authentication sessions.
• If tagged VLANs (statically configured or RADIUS-
assigned) are used (
Yes
or
No
)
• If client-specific per-port CoS (Class of Service) values are
configured (
Yes
or
No
) or the numerical value of the CoS
(802.1p priority) applied to all inbound traffic. For client-
specific per-port CoS values, enter the
show port-access
web-based clients detailed command.
• If per-port rate-limiting for inbound traffic is applied (
Yes
or No ) or the percentage value of the port’s available
bandwidth applied as a rate-limit value.
• If RADIUS-assigned ACLs are applied
Information on ports not enabled for MAC authentication is
not displayed.
3-36