Brocade Communications Systems Brocate Ethernet Access Switch 6910 - Manual (Page 891)

Brocade 6910 Ethernet Access Switch Configuration Guide 841
53-1002581-01
Network Access (MAC Address Authentication)
41
Configuring Global Settings for Network Access
MAC address authentication is configured on a per-port basis, however there are two configurable
parameters that apply globally to all ports on the switch. Use the Security > Network Access
(Configure Global) page to configure MAC address authentication aging and reauthentication time.
CLI References
• “Network Access (MAC Address Authentication)” on page 197
Parameters
These parameters are displayed:
• Aging Status – Enables aging for authenticated MAC addresses stored in the secure MAC
address table. (Default: Disabled)
This parameter applies to authenticated MAC addresses configured by the MAC Address
Authentication process described in this section, as well as to any secure MAC addresses
authenticated by 802.1X, regardless of the 802.1X Operation Mode (Single-Host, Multi-Host, or
MAC-Based authentication as described on
page 890 ).
Authenticated MAC addresses are stored as dynamic entries in the switch’s secure MAC
address table and are removed when the aging time expires.
The maximum number of secure MAC addresses supported for the switch system is 1024.
• Reauthentication Time – Sets the time period after which a connected host must be
reauthenticated. When the reauthentication time expires for a secure MAC address, it is
reauthenticated with the RADIUS server. During the reauthentication process traffic through
the port remains unaffected. (Range: 120-1000000 seconds; Default: 1800 seconds)
Interface
To configure aging status and reauthentication time for MAC address authentication:
1. Click Security, Network Access.
2. Select Configure Global from the Step list.
3. Enable or disable aging for secure addresses, and modify the reauthentication time as
required.
4. Click Apply.
FIGURE 182 Configuring Global Settings for Network Access