Accton Technology ES3526XA, ES3552XA manual Network Access, Network-access mode

4 Command Line Interface

Network Access

The Network Access feature controls host access to the network by authenticating its MAC address on the connected switch port. Traffic received from a specific MAC address is forwarded by the switch only if the source MAC address is successfully authenticated by a central RADIUS server. While authentication for a MAC address is in progress, all traffic is blocked until authentication is completed. On successful authentication, the RADIUS server may optionally assign VLAN settings for the switch port.

Table 4-33 Network Access

Command	Function	Mode	Page
network-access mode	Enables MAC authentication on an interface	IC	4-94
network-access	Sets a maximum for authenticated MAC addresses on an	IC	4-95
max-mac-count	interface
network-access mac-filter	Configures a MAC address filter	GC	4-96
network-access	Binds a MAC address filter to an interface	IC	4-97
port-mac-filter
network-access	Enables dynamic VLAN assignment from a RADIUS	IC	4-97
dynamic-vlan	server
mac-authentication	Sets the time period after which a connected MAC	GC	4-98
reauth-time	address must be re-authenticated
clear network-access	Clears authenticated MAC addresses from the address	PE	4-99
	table
show network-access	Displays the MAC authentication settings for port	PE	4-99
	interfaces
show network-access	Displays the configuration of MAC authentication filters	PE	4-100
mac-filter
show network-access	Displays information for entries in the secure MAC	PE	4-100
mac-address-table	address table

network-access mode

Use this command to enable network access authentication on a port interface. Use the no form of this command to disable authentication.

Syntax

[no] network-access mode mac-authentication

Default Setting

Disabled

Command Mode

Interface Configuration

4-94