Page 441 / 757 Scroll up to view Page 436 - 440
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
437
DGS-3627:admin# config mac_notification ports 7 enable
Command: config mac_notification ports 7 enable
Success.
DGS-3627:admin#
show mac_notification
Purpose
Used to display the Switch’s MAC address table notification global settings
Syntax
show mac_notification
Description
This command is used to display the Switch’s MAC address table notification global settings.
Parameters
None.
Restrictions
None.
Example usage:
To view the Switch’s MAC address table notification global settings:
DGS-3627:admin# show mac_notification
Command: show mac_notification
Global Mac Notification Settings
State
: Enabled
Interval
: 1
History Size
: 1
DGS-3627:admin#
show mac_notification ports
Purpose
Used to display the Switch’s MAC address table notification status settings
Syntax
show mac_notification ports {<portlist>}
Description
This command is used to display the Switch’s MAC address table notification status settings.
Parameters
<portlist>
– Specify a port or group of ports to be viewed. The beginning and end of the port list
range are separated by a dash. Non-contiguous portlist entries are separated by a comma.
(ex: 1-3,7-9)
Entering this command without the parameter will display the MAC notification table for all
ports.
Restrictions
None.
Example usage:
To display all port’s MAC address table notification status settings:
Page 442 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
438
DGS-3627:admin# show mac_notification ports
Command: show mac_notification ports
Port #
MAC Address Table Notification State
------
-----------------------------------------
1
Disabled
2
Disabled
3
Disabled
4
Disabled
5
Disabled
6
Disabled
7
Disabled
8
Disabled
9
Disabled
10
Disabled
11
Disabled
12
Disabled
13
Disabled
14
Disabled
15
Disabled
16
Disabled
17
Disabled
18
Disabled
19
Disabled
20
Disabled
CTRL+C ESC q
Quit
SPACE n
Next Page
p
Previous Page
r
Refresh
Page 443 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
439
58
MAC-BASED ACCESS CONTROL COMMANDS
MAC-based Access Control (MAC) is a method to authenticate and authorizes a port/host network access right based on
the MAC address on which the user is located rather than user’s identification (e.g. user name and password).
MAC users need to complete authentication before accessing a network. Both local authentication and remote RADIUS
server authentication are supported. MAC user information in local databases or RADIUS server databases will be
searched for authentication, and following the authentication result, users will gain different types of authorization.
The MAC-based Access Control commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Page 444 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
440
Command
Parameters
enable mac_based_access_control
disable mac_based_access_control
config mac_based_access_control
password
<passwd 16>
config mac_based_access_control
method
[local | radius]
config mac_based_access_control
guest_vlan ports
<portlist>
config mac_based_access_control
ports
[<portlist> | all] {state [enable | disable] | mode [port_based | host_based] |
aging_time [infinite | <min 1-1440>] | [block_time | hold_time ]
[infinite|<sec 1-
300>] | max_users [<value 1-4000> | no_limit]}(1)
create mac_based_access_control
[guest_vlan <vlan_name 32> | guest_vlanid <vlanid 1-4094>]
delete mac_based_access_control
[guest_vlan <vlan_name 32> | guest_vlanid < vlanid 1-4094>]
clear mac_based_access_control
auth_state
[ports [all | <portlist>] | mac_addr <macaddr>]
create
mac_based_access_control_local
mac
<macaddr> {[vlan <vlan_name 32> | vlanid < vlanid 1-4094>]}
config
mac_based_access_control_local
mac
<macaddr> [vlan <vlan_name 32> | vlanid < vlanid 1-4094> | clear_vlan]
delete
mac_based_access_control_local
[mac <macaddr> | vlan <vlan_name 32> | vlanid < vlanid 1-4094>]
config mac_based_access_control
authorization network
{radius [enable | disable] | local [enable | disable]} (1)
show mac_based_access_control
{ports {<portlist>}}
show
mac_based_access_control_local
{[mac <macaddr> | vlan <vlan_name 32> | vlanid <1-4094>]}
show mac_based_access_control
auth_state ports
{<portlist>}
config mac_based_access_control
max_users
[<value 1-4000> | no_limit]
Each command is listed, in detail, in the following sections.
enable mac_based_access_control
Purpose
Used to enable MAC-based Access Control.
Syntax
enable mac_based_access_control
Description
This command enables the MAC-based Access Control function.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable the MAC-based Access Control global state:
Page 445 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
441
DGS-3627:admin# enable mac_based_access_control
Command: enable mac_based_access_control
Success.
DGS-3627:admin#
disable mac_based_access_control
Purpose
Used to disable MAC-based Access Control.
Syntax
disable mac_based_access_control
Description
This command disables the MAC-based Access Control function.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable the MAC-based Access Control global state:
DGS-3627:admin# disable mac_based_access_control
Command: disable mac_based_access_control
Success.
DGS-3627:admin#
config mac_based_access_control password
Purpose
Used to configure the RADIUS authentication password for MAC-based Access Control.
Syntax
config mac_based_access_control password <passwd 16>
Description
This command will set the password that will be used for authentication via the RADIUS
server.
Parameters
<passwd 16>
- In RADIUS mode, the switch will communicate with the RADIUS server using
this password. The maximum length of the key is 16.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To set the MAC-based Access Control password:
DGS-3627:admin# config mac_based_access_control password switch
Command: config mac_based_access_control password switch
Success.
DGS-3627:admin#
config mac_based_access_control method
Purpose
Used to configure the MAC-based Access Control authentication method.
Syntax
config mac_based_access_control method [local | radius]

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top