ECS3510-26P_Management Guide R02

C HAPTER 24 | General Security Measures
Network Access (MAC Address Authentication)
– 668 –
mac-address - Specifies a MAC address entry.
(Format: xx-xx-xx-xx-xx-xx)
mask - Specifies a MAC address bit mask for a range of addresses.
DEFAULT SETTING
Disabled
COMMAND MODE
Global Configuration
COMMAND USAGE
◆ Specified addresses are exempt from network access authentication.
◆ This command is different from configuring static addresses with the
mac-address-table static command in that it allows you configure a
range of addresses when using a mask, and then to assign these
addresses to one or more ports with the network-access port-mac-filter
command.
◆ Up to 64 filter tables can be defined.
◆ There is no limitation on the number of entries that can entered in a
filter table.
EXAMPLE
Console(config)#network-access mac-filter 1 mac-address 11-22-33-44-55-66
Console(config)#
mac-authentication
reauth-time
Use this command to set the time period after which a connected MAC
address must be re-authenticated. Use the no form of this command to
restore the default value.
SYNTAX
mac-authentication reauth-time seconds
no mac-authentication reauth-time
seconds - The reauthentication time period.
(Range: 120-1000000 seconds)
DEFAULT SETTING
1800
COMMAND MODE
Global Configuration