Limiting the number of authenticated mac addresses, Displaying authenticated mac address information – Brocade Communications Systems Brocade ICX 6650 6650 User Manual

Page 272

Advertising
background image

252

Brocade ICX 6650 Security Configuration Guide

53-1002601-01

Displaying multi-device port authentication information

Brocade(config)# mac-authentication password-override

Syntax: [no] mac-authentication password-override password

where password can have up to 32 alphanumeric characters, but cannot include blank spaces.

Limiting the number of authenticated MAC addresses

You cannot enable MAC port security on the same port that has multi-device port authentication
enabled. To simulate the function of MAC port security, you can enter a command such as the
following.

Brocade(config-if-e10000-1/1/2)# mac-authentication max-accepted-session 5

Syntax: [no] mac-authentication max-accepted-session session-number

This command limits the number of successfully authenticated MAC addresses. Enter a value from
1 - 250 for session-number

Displaying multi-device port authentication information

You can display the following information about the multi-device port authentication configuration:

Information about authenticated MAC addresses

Information about the multi-device port authentication configuration

Authentication Information for a specific MAC address or port

Multi-device port authentication settings and authenticated MAC addresses for each port
where the multi-device port authentication feature is enabled

The MAC addresses that have been successfully authenticated

The MAC addresses for which authentication was not successful

Displaying authenticated MAC address information

To display information about authenticated MAC addresses on the ports where the multi-device
port authentication feature is enabled, enter the show auth-mac address command.

Syntax: show auth-mac-address

The following table describes the information displayed by the show auth-mac-address command.

Brocade# show auth-mac-address
----------------------------------------------------------------------
Port Vlan Accepted MACs Rejected MACs Attempted-MACs
----------------------------------------------------------------------
1/1/8 100 1 100 0
1/2/1 40 0 0 0
1/2/2 100 0 0 0
1/3/5 30 0 0 0

Advertising