D-Link DGS-3100 Switch User Manual


 
DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
14
8
disable mac_based_access_control
Purpose To globally disable MAC based access control.
Syntax
disable mac_based_access_control
Description The disable mac_based_access_control command disables the
functionality of MAC-based access control globally on the switch.
This command disables 802.1x if it is enabled, as 802.1x
functionality is used to activate MAC authentication.
However, if ports activated to the standard ‘Port Based 802.1x’ exist,
802.1x is not disabled globally, and only the MAC Based
authentication configured ports move to a ‘Forced Authorized’ state.
Parameters None.
Restrictions None.
Example usage:
To disable MAC Based Access Control:
DGS3100# disable mac_based_access_control
DGS3100#
config mac_based_access_control
Purpose To enable/disable MAC based access control on a port(s).
Syntax
config mac_based_access_control {ports [<portlist> | all] state
[enable | disable] }
Description The config mac_based_access_control command enables or
disables the functionality of MAC-based access control on a port(s).
When using command to enable functionality:
This command enables 802.1x on the port(s), as 802.1x functionality
is used to activate MAC authentication. This command also
configures RADIUS as the authenticating protocol for 802.1x. To
achieve this, the enable command runs the following 802.1x
commands:
- config 802.1x auth_parameter ports 1:2 enable_reauth enable
- config 802.1x auth_parameter ports 1:2 port_control auto
- config 802.1x auth_mode mac_base ports 1:2
- config 802.1x auth_protocol radius
Important note: In order to complete the activation of MAC
authentication, the related ports must be configured as members in
the guest VLAN.
When using this command to disable functionality on a port or ports,
this command returns the port(s) to the default settings. To achieve
this, the disable command removes the following commands
(configured by the enable command) from port:
- config 802.1x auth_parameter ports 1:2 enable_reauth enable
- config 802.1x auth_parameter ports 1:2 port_control auto
- config 802.1x auth_mode mac_base ports 1:2
Parameters <portlist> A port or range of ports whose MAC authentication is
enabled/disabled on it.