Extreme Networks ExtremeWare XOS 11.1, Руководство пользователя

Страница: 238 / 496

Security
ExtremeWare XOS 11.1 Concepts Guide
238
To add a MAC address to the table, use the following command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} {<password>}
To remove a MAC address from the table, use the following command:
configure netlogin delete mac-list [<mac> {<mask>} | default]
To display the MAC address table, use the following command:
show netlogin mac-list
When a client needs authentication the best match will be used to authenticate to the server.
MAC-based authentication is virtual router aware, so there is one MAC list per virtual router.
Example
Assume we have a supplicant with MAC address 00:04:96:05:40:00, and the switch has the following
table:
MAC Address/Mask Password (encrypted)
-------------------- ----------------------------------------
00:01:30:70:0C:00/48 yaqu
00:01:30:32:7D:00/48 #ravdqsr
00:04:96:00:00:00/24 <not configured>
00:06:00:00:00:00/32 <not configured>
default <not configured>
The user name used to authenticate against the Radius server would be; “000496000000”, as this is the
supplicants MAC address with the configured mask applied.
Note that the commands are virtual router aware, and therefore one mac-list table exists per virtual
router.
DHCP Server
Dynamic Host Configuration Protocol (DHCP) support was introduced into ExtremeWare XOS in
release 11.0.
DHCP Server on the Switch
A DHCP server with limited configuration capabilities is included in the switch to provide IP addresses
to clients.
DHCP is enabled on a per port, per VLAN basis. To enable or disable DHCP on a port in a VLAN, use
one of the following commands:
enable dhcp ports <portlist> vlan <vlan_name>
disable dhcp ports <portlist> vlan <vlan name>