xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
104
DGS-3450:admin# config authentication guest_vlan vlan gv add ports all
Command: config authentication guest_vlan vlan gv add ports all
Success.
DGS-3450:admin#
config authentication ports
Purpose
Used to configure security port(s).
Syntax
config authentication ports [<portlist> | all] {auth_mode [port_based | host_based {
vlanid <vidlist> state [enable | disable] }]| multi_authen_methods[none | any |
dot1x_impb | impb_jwac]} (1)
Description
The user can use this command to configure authorization mode and authentication method
on ports.
Parameters
portlist
- Specify port(s) to configure.
auth_mode - port_based
- If one of the attached hosts passes the authentication, all
hosts on the same port will be granted to access network. If the user fails to
authorize, this port will keep trying the next authentication
host_based
- Every user can be authenticated individually. V2.01 and later, can
authenticate client on specific authentication VLAN(s).
vlanid
- Specific authentication VLAN(s).
enable
- Assign the specified VID list as authentication VLAN(s).
disable
- Remove the specified VID list from authentication VLAN(s).
If "vlanid" is not specified, or all VLANs is disabled,means do not care whitch VLAN the client
comes from,the client will be authenticated if the client's MAC(not care the VLAN) is not
authenticated. After the client is authenticated,the client will not be re-authenticated when
received from other VLANs.
All VLANs are disabled by default.
NOTE:
When port’s authorization mode is changed to port based, previously authentication
VLAN(s) on this port will be clear.
multi_authen_methods
- Specifies the method for compound authentication.
none
- Compound authentication is not enabled,
For project that support single authentication mode, the authentication method is defined by
individual authentication module.
For project that does not support single authentication mode, access authentication is
disabled on the port.
any
- If any one of the authentication method (802.1X, MAC-AC, WAC and JWAC) passes,
then pass.
dot1x_impb
- Dot1x will be verified first, and then IMPB will be verified. Both authentication
need to be passed.
impb_jwac
- JWAC will be verified first, and then IMPB will be verified. Both authentication
need to be passed.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
The following example sets authorization mode and authentication VLAN for all port: