User Authentication 3

CLI – This example displays all entries currently in the secure MAC address table.

Console#show network-access mac-address-table

4-100

---- ----------------- ---------------

---------

-------------------------

Port MAC-Address

RADIUS-Server

Attribute

Time

---- -----------------

---------------

---------

-------------------------

1/1 00-00-01-02-03-04

172.155.120.17

Static

00d06h32m50s

1/1 00-00-01-02-03-05

172.155.120.17

Dynamic

00d06h33m20s

1/1 00-00-01-02-03-06

172.155.120.17

Static

00d06h35m10s

1/3 00-00-01-02-03-07

172.155.120.17

Dynamic

00d06h34m20s

Console#

Configuring MAC Address Filters

MAC address filters are used to specify MAC addresses to be excluded from network access authentication. MAC addresses in a filter are not authenticated by a RADIUS server when seen on a port, the addresses are immediately added to the secure MAC address table.

MAC address filters must first be created and assigned a filter ID, then the filter can be applied to a port interface. Multiple MAC addresses can be included in a filter, but only one filter can be applied to a port.

Command Attributes

Query – Display all current MAC address filters or a specific filter configuration.

Add/Remove – Specify a filter ID and MAC address to create a filter. Specify the same filter ID with other MAC addresses to add them to the filter. Select an entry in the displayed list and click Remove to delete a MAC address from a filter.

Filter ID – Specifies a filter to configure. (Range: 1 -64)

MAC Address – Specifies a single MAC address to add to a filter.

Web – Click Security, Network Access, MAC Filter Configuration.

Figure 3-46 Network Access MAC Filter Configuration

3-79

Page 123
Image 123
Accton Technology ES3552XA, ES3526XA manual Configuring MAC Address Filters, 100