Filter
Top Products
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
442
config mac_based_access_control method
Description Specify the authentication method used via the local database or via the RADIUS server.
Parameters
local - Specify to authenticate via the local database.
radius - Specify to authenticate via a RADIUS server.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To set the MAC-based Access Control authentication method as local:
DGS-3627:admin# config mac_based_access_control method local
Command: config mac_based_access_control method local
Success.
DGS-3627:admin#
config mac_based_access_control guest_vlan
Purpose Used to configure the MAC-based Access Control guest VLAN membership.
Syntax
config mac_based_access_control guest_vlan ports <portlist>
Description This command will assign a specified port list to the MAC-based Access Control guest VLAN.
Ports that are not contained in port list will be removed from the MAC-based Access Control
guest VLAN.
Parameters
<portlist> - Specify MAC-based Access Control guest VLAN membership.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To set the MAC-based Access Control guest VLAN membership:
DGS-3627:admin# config mac_based_access_control guest_vlan ports 1-8
Command: config mac_based_access_control guest_vlan ports 1-8
Success.
DGS-3627:admin#
config mac_based_access_control ports
Purpose Used to configure the port parameters for MAC-based Access Control.
Syntax
config mac_based_access_control ports [<portlist> | all] {state [enable | disable] |
mode [port_based | host_based] | aging_time [infinite | <min 1-1440>] | [block_time |
hold_time ] [infinite|<sec 1-300>] | max_users [<value 1-4000> | no_limit]}(1)
Description This command allows configures MAC-based Access Control port’s setting.
When the MAC-based Access Control function is enabled for a port and the port is not a
MAC-based Access Control guest VLAN member, the user who is attached to this port will
not be forwarded unless the user passes the authentication. A user that does not pass the
authentication will not be serviced by the switch. If the user passes the authentication, the
user will be able to forward traffic operated under the assigned VLAN.
When the MAC-based Access Control function is enabled for a port, and the port is a MAC-
based Access Control guest VLAN member, the port(s) will be removed from the original