Network-access aging, Network-access mac-filter – Microsens MS453490M Management Guide User Manual

Page 642

Advertising
background image

C

HAPTER

25

| General Security Measures

Network Access (MAC Address Authentication)

– 642 –

network-access

aging

Use this command to enable aging for authenticated MAC addresses stored

in the secure MAC address table. Use the no form of this command to

disable address aging.

S

YNTAX

[no] network-access aging

D

EFAULT

S

ETTING

Disabled

C

OMMAND

M

ODE

Global Configuration

C

OMMAND

U

SAGE

Authenticated MAC addresses are stored as dynamic entries in the

switch’s secure MAC address table and are removed when the aging

time expires. The address aging time is determined by the

mac-

address-table aging-time

command.

This parameter applies to authenticated MAC addresses configured by

the MAC Address Authenticataion process described in this section, as

well as to any secure MAC addresses authenticated by 802.1X,

regardless of the 802.1X Operation Mode (Single-Host, Multi-Host, or

MAC-Based authentication as described on

page 622

).

The maximum number of secure MAC addresses supported for the

switch system is 1024.

E

XAMPLE

Console(config-if)#network-access aging

Console(config-if)#

network-access

mac-filter

Use this command to add a MAC address into a filter table. Use the no

form of this command to remove the specified MAC address.

S

YNTAX

[no] network-access mac-filter filter-id

mac-address mac-address [mask mask-address]
filter-id - Specifies a MAC address filter table. (Range: 1-64)
mac-address - Specifies a MAC address entry.

(Format: xx-xx-xx-xx-xx-xx)
mask - Specifies a MAC address bit mask for a range of addresses.

D

EFAULT

S

ETTING

Disabled

Advertising