Accton Technology ES3526XA, ES3552XA manual Mac-authentication reauth-time, 1800

4 Command Line Interface

Command Usage

•When enabled, the VLAN identifiers returned by the RADIUS server will be applied to the port, providing the VLANs have been already created on the switch. GVRP is not used to create the VLANs.

•The VLAN settings specified by the first authenticated MAC address are implemented for a port. Other authenticated MAC address on the port must have same VLAN configuration, or they are treated as authentication failure.

•If dynamic VLAN assignment is enabled on a port and the RADIUS server returns no VLAN configuration, the authentication is still treated as a success.

•When the dynamic VLAN assignment status is changed on a port, all authenticated addresses are cleared from the secure MAC address table.

Example

The following example enables dynamic VLAN assignment on port 1.

Console(config)#interface ethernet 1/1

Console(config-if)#network-access dynamic-vlan

Console(config-if)#

mac-authentication reauth-time

Use this command to set the time period after which a connected MAC address must be re-authenticated. Use the no form of this command to restore the default value.

Syntax

mac-authentication reauth-time seconds no mac-authentication reauth-time

seconds - The reauthentication time period. (Range: 120-1000000 seconds)

Default Setting

1800

Command Mode

Global Configuration

Command Usage

•The reauthentication time is a global setting and applies to all ports.

•When the reauthentication time expires for a secure MAC address it is reauthenticated with the RADIUS server. During the reauthentication process traffic through the port remains unaffected.

Example

Console(config)#mac-authentication reauth-time 300

Console(config)#

4-98