Filter
Top Products
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
450
Example usage:
Suppose that port 1 is in host based mode:
MAC 00-00-00-00-00-01 is authenticated without a VLAN assigned (may be the specified target VLAN does not exist or
the target VLAN has not been specified at all), the ID of the RX VLAN will be displayed (RX VLAN ID is 4004 in this
example).
MAC 00-00-00-00-00-02 is authenticated with a target VLAN assigned, the ID of the target VLAN will be displayed (target
VLAN ID is 1234 in this example).
MAC 00-00-00-00-00-03 fails to pass authentication, the VID field will be shown as “-”, indicating that packets with SA 00-
00-00-00-00-03 will be dropped no matter which VLAN these packets are from.
MAC 00-00-00-00-00-04 attempts to start authentication, the VID field will be shown as “-“until authentication completes.
Suppose that port 2 is in port based mode:
MAC 00-00-00-00-00-10 is the host which causes port 2 to pass authentication; the MAC address is followed by “(P)” to
indicate port based mode authentication.
Suppose that port 3 is in port based mode:
MAC 00-00-00-00-00-20 attempts to start authentication, the MAC address is followed by “(P)” to indicate port based
mode authentication.
MAC 00-00-00-00-00-21 fails to pass authentication, the MAC address is followed by “(P)” to indicate port based mode
authentication.
NOTE: In port-based mode, the VLAN ID field is displayed in the same way as host based mode.
To display the MAC-based Access Control authentication status on port 1, 2, 3.
DGS-3627:admin# show mac_based_access_control auth_state ports 1-3
Command: show mac_based_access_control auth_state ports 1-3
(P):Port based
Port MAC Address State VID Priority Aging Time/
Block Time
---- ------------------- ------------- ------- ---------- ------------
1 00-00-00-00-00-01 Authenticated 4004 3 Infinite
1 00-00-00-00-00-02 Authenticated 1234 - Infinite
1 00-00-00-00-00-03 Blocked - - 60
1 00-00-00-00-00-04 Authenticating - - 5
2 00-00-00-00-00-10(P) Authenticated 1234 4 1440
3 00-00-00-00-00-20(P) Authenticating - - 20
3 00-00-00-00-00-21(P) Blocked - - 120
Total Authenticating Hosts :2
Total Authenticated Hosts :3
Total Blocked Hosts :2
DGS-3627:admin#
config mac_based_access_control max_users
Purpose Used to configure the maximum number of authorized clients.
Syntax
config mac_based_access_control max_users [<value 1-4000> | no_limit]
Description This setting is a global limitation on the maximum number of users that can be learned via
MAC-based Access Control.
In addition, to the global limitation, the maximum number of users per port is also limited.