Command Line Interface
4-98
4
Command Usage
• When enabled, the VLAN identifiers returned by the RADIUS server will be
applied to the port, providing the VLANs have been already created on the
switch. GVRP is not used to create the VLANs.
• The VLAN settings specified by the first authenticated MAC address are
implemented for a port. Other authenticated MAC address on the port must
have same VLAN configuration, or they are treated as authentication failure.
• If dynamic VLAN assignment is enabled on a port and the RADIUS server
returns no VLAN configuration, the authentication is still treated as a success.
• When the dynamic VLAN assignment status is changed on a port, all
authenticated addresses are cleared from the secure MAC address table.
Example
The following example enables dynamic VLAN assignment on port 1.
mac-authentication reauth-time
Use this command to set the time period after which a connected MAC address
must be re-authenticated. Use the no form of this command to restore the default
value.
Syntax
mac-authentication reauth-time seconds
no mac-authentication reauth-time
seconds - The reauthentication time period.
(Range: 120-1000000 seconds)
Default Setting
1800
Command Mode
Global Configuration
Command Usage
• The reauthentication time is a global setting and applies to all ports.
• When the reauthentication time expires for a secure MAC address it is
reauthenticated with the RADIUS server. During the reauthentication process
traffic through the port remains unaffected.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access dynamic-vlan
Console(config-if)#
Console(config)#mac-authentication reauth-time 300
Console(config)#