ECS4100 Series CLI Reference Guide-R07

Chapter 9 | General Security Measures
Network Access (MAC Address Authentication)
– 305 –
addresses when using a mask, and then to assign these addresses to one or
more ports with the network-access port-mac-filter command.
◆ Up to 64 filter tables can be defined.
◆ There is no limitation on the number of entries that can entered in a filter table.
Example
Console(config)#network-access mac-filter 1 mac-address 11-22-33-44-55-66
Console(config)#
mac-authentication
reauth-time
Use this command to set the time period after which an authenticated MAC
address is removed from the secure address table. Use the no form of this
command to restore the default value.
Syntax
mac-authentication reauth-time seconds
no mac-authentication reauth-time
seconds - The reauthentication time period. (Range: 120-1000000 seconds)
Default Setting
1800
Command Mode
Global Configuration
Command Usage
◆ The reauthentication time is a global setting and applies to all ports.
◆ When the reauthentication time expires for a secure MAC address it is
reauthenticated with the RADIUS server. During the reauthentication process
traffic through the port remains unaffected.
Example
Console(config)#mac-authentication reauth-time 300
Console(config)#
network-access
dynamic-qos
Use this command to enable the dynamic QoS feature for an authenticated port.
Use the no form to restore the default.
Syntax
[no] network-access dynamic-qos