Filter
Top Products
Authentication Commands
4-121
4
Network Access – MAC Address Authentication
The Network Access feature controls host access to the network by authenticating
its MAC address on the connected switch port. Traffic received from a specific MAC
address is forwarded by the switch only if the source MAC address is successfully
authenticated by a central RADIUS server. While authentication for a MAC address
is in progress, all traffic is blocked until authentication is completed. On successful
authentication, the RADIUS server may optionally assign VLAN settings for the
switch port.
network-access mode
Use this command to enable network access authentication on a port interface. Use
the no form of this command to disable network access authentication.
Syntax
[no] network-access mode mac-authentication
Table 4-36 Network Access
Command Function Mode Page
network-access mode Enables MAC authentication on an interface IC 4-121
network-access
max-mac-count
Sets a maximum for authenticated MAC addresses on an
interface
IC 4-122
mac-authentication
intrusion-action
Determines the port response when a connected host fails
MAC authentication.
IC 4-123
mac-authentication
max-mac-count
Sets a maximum for mac-authentication autenticated
MAC addresses on an interface
IC 4-123
network-access dynamic-qos Enables dynamic quality of service feature IC 4-124
network-access
dynamic-vlan
Enables dynamic VLAN assignment from a RADIUS
server
IC 4-124
network-access guest-vlan Specifies the guest VLAN IC 4-125
network-access
link-detection
Enables the link detection feature IC 4-125
network-access
link-detection link-down
Configures the link detection feature to detect and act
upon link down events
IC 4-125
network-access
link-detection link-up
Configures the link detection feature to detect and act
upon link up events
IC 4-125
network-access
link-detection link-up-down
Configures the link detection feature to detect and act
upon both link-up and link-down events
IC 4-125
mac-authentication
reauth-time
Sets the time period after which a connected MAC
address must be re-authenticated
GC 4-127
clear network-access Clears authenticated MAC addresses from the address
table
PE 4-128
show network-access Displays the MAC authentication settings for port
interfaces
PE 4-128
show network-access
mac-address-table
Displays information for entries in the secure MAC
address table
PE 4-129