Network-access dynamic-qos, Table 51 – Brocade Communications Systems Brocate Ethernet Access Switch 6910 User Manual
Page 250
200
Brocade 6910 Ethernet Access Switch Configuration Guide
53-1002581-01
Network Access (MAC Address Authentication)
10
Command Usage
•
The reauthentication time is a global setting and applies to all ports.
•
When the reauthentication time expires for a secure MAC address it is reauthenticated with
the RADIUS server. During the reauthentication process traffic through the port remains
unaffected.
Example
Console(config)#mac-authentication reauth-time 300
Console(config)#
network-access dynamic-qos
Use this command to enable the dynamic QoS feature for an authenticated port. Use the no form to
restore the default.
Syntax
[no] network-access dynamic-qos
Default Setting
Disabled
Command Mode
Interface Configuration
Command Usage
•
The RADIUS server may optionally return dynamic QoS assignments to be applied to a switch
port for an authenticated user. The “Filter-ID” attribute (attribute 11) can be configured on the
RADIUS server to pass the following QoS information:
•
When the last user logs off of a port with a dynamic QoS assignment, the switch restores the
original QoS configuration for the port.
•
When a user attempts to log into the network with a returned dynamic QoS profile that is
different from users already logged on to the same port, the user is denied access.
•
While a port has an assigned dynamic QoS profile, any manual QoS configuration changes only
take effect after all users have logged off of the port.
NOTE
Any configuration changes for dynamic QoS are not saved to the switch configuration file.
TABLE 51
Dynamic QoS Profiles
Profile
Attribute Syntax
Example
DiffServ
service-policy-in=policy-map-name
service-policy-in=p1
Rate Limit
rate-limit-input=rate
rate-limit-input=100 (Kbps)
802.1p
switchport-priority-default=value
switchport-priority-default=2
IP ACL
ip-access-group-in=ip-acl-name
ip-access-group-in=ipv4acl
IPv6 ACL
ipv6-access-group-in=ipv6-acl-name
ipv6-access-group-in=ipv6acl
MAC ACL
mac-access-group-in=mac-acl-name
mac-access-group-in=macAcl