Dell FCX624-E Laptop User Manual


  Open as PDF
of 1494
 
PowerConnect B-Series FCX Configuration Guide 1287
53-1002266-01
Configuring multi-device port authentication
36
In the above output, for port 6/12, Source Guard Protection is enabled and the Source Guard ACL
is applied to the MAC session, as indicated by SG in the ACL column. For port 6/13, Source Guard
Protection is also enabled, but in this instance, a dynamic ACL (103) is applied to the MAC session.
Clearing authenticated MAC addresses
The Dell PowerConnect device maintains an internal table of the authenticated MAC addresses
(viewable with the show authenticated-mac-address command). You can clear the contents of the
authenticated MAC address table either entirely, or just for the entries learned on a specified
interface. In addition, you can clear the MAC session for an address learned on a specific
interface.
To clear the entire contents of the authenticated MAC address table, enter the following command.
PowerConnect#clear auth-mac-table
Syntax: clear auth-mac-table
To clear the authenticated MAC address table of entries learned on a specified interface, enter a
command such as the following.
PowerConnect#clear auth-mac-table e 3/1
Syntax: clear auth-mac-table ethernet <port>
Specify the <port> variable in the following formats:
PowerConnect B-Series FCX stackable switches – <stack-unit/slotnum/portnum>
To clear the MAC session for an address learned on a specific interface, enter commands such as
the following.
PowerConnect(config)#interface e 3/1
PowerConnect(config-if-e1000-3/1)#mac-authentication clear-mac-session
00e0.1234.abd4
Syntax: mac-authentication clear-mac-session <mac-address>
This command removes the Layer 2 CAM entry created for the specified MAC address. If the Dell
PowerConnect device receives traffic from the MAC address again, the MAC address is
authenticated again.
NOTE
In a configuration with multi-device port authentication and 802.1X authentication on the same
port, the mac-authentication clear-mac-session command will clear the MAC session, as well as its
respective 802.1X session, if it exists.
PowerConnect(config)#show auth-mac-addresses authorized-mac ip-addr
-------------------------------------------------------------------------------
MAC Address SourceIp Port Vlan Auth Age ACL dot1x
-------------------------------------------------------------------------------
00A1.0010.2000 200.1.17.5 6/12 171 Yes Dis SG Ena
00A1.0010.2001 200.1.17.6 6/13 171 Yes Dis 103 Ena