DGS-1510/ME Series Metro Ethernet Switch CLI Reference Guide
355
42-5
config mac_based_access_control guest_vlan ports
Description
This command is used to assign a specified port list to the MAC-based Access Control guest VLAN. Ports that are
not contained in port list will be removed from the MAC-based Access Control guest VLAN.
For detailed information on the operation of MAC-based Access Control guest VLANs, refer to the description for
the
config mac_based_access_control ports
command.
Format
config mac_based_access_control guest_vlan ports <portlist>
Parameters
<portlist>
- Enter a list of ports to be configured.
Restrictions
Only Administrators, Operators and Power-Users can issue this command.
Example
To set the MAC-based Access Control guest VLAN membership:
DGS-1510-28XMP/ME:admin# config mac_based_access_control guest_vlan ports 1-8
Command: config mac_based_access_control guest_vlan ports 1-8
Success.
DGS-1510-28XMP/ME:admin#
42-6
config mac_based_access_control ports
Description
This command is used to configure MAC-based Access Control port’s setting.
When the MAC-based Access Control function is enabled for a port and the port is not a MAC-based Access
Control guest VLAN member, the user who is attached to this port will not be forwarded unless the user passes the
authentication.
•
A user that does not pass the authentication will not be serviced by the Switch.
•
If the user passes the authentication, the user will be able to forward traffic operated under the assigned
VLAN.
When the MAC-based Access Control function is enabled for a port, and the port is a MAC-based Access Control
guest VLAN member, the port(s) will be removed from the original VLAN(s) member ports, and added to MAC-
based Access Control guest VLAN member ports.
•
Before the authentication process starts, the user is able to forward traffic under the guest VLAN.
•
After the authentication process, the user will be able to access the assigned VLAN.
If the port authorize mode is port based mode, when the port has been moved to the authorized VLAN, the
subsequent users will not be authenticated again. They will operate in the current authorized VLAN.
Содержание DGS-1510/ME Series
Страница 1: ......