CLI Reference Guide-R05

Chapter 9 | General Security Measures
Network Access (MAC Address Authentication)
– 294 –
network-access
port-mac-filter
Use this command to enable the specified MAC address filter. Use the no form of
this command to disable the specified MAC address filter.
Syntax
network-access port-mac-filter filter-id
no network-access port-mac-filter
filter-id - Specifies a MAC address filter table. (Range: 1-64)
Default Setting
None
Command Mode
Interface Configuration
Command Mode
◆ Entries in the MAC address filter table can be configured with the network-
access mac-filter command.
◆ Only one filter table can be assigned to a port.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access port-mac-filter 1
Console(config-if)#
mac-authentication
intrusion-action
Use this command to configure the port response to a host MAC authentication
failure. Use the no form of this command to restore the default.
Syntax
mac-authentication intrusion-action {block traffic | pass traffic}
no mac-authentication intrusion-action
Default Setting
Block Traffic
Command Mode
Interface Configuration
Example
Console(config-if)#mac-authentication intrusion-action block-traffic
Console(config-if)#