Specifications
Table Of Contents
- Table of Contents
- Preface Template Formats
- Web-based (GUI) Configuration
- Configuration
- Device Information
- System Information
- Serial Port Settings
- IP Address Settings
- IPv6 Address Settings
- IPv6 Route Settings
- IPv6 Neighbor Settings
- Port Configuration Folder
- Static ARP Settings
- User Accounts
- System Log Configuration Folder
- DHCP Relay Folder
- MAC Address Aging Time
- Web Settings
- Telnet Settings
- CLI Paging Settings
- Firmware Information
- SNTP Settings Folder
- SMTP Settings Folder
- SNMP Settings Folder
- Layer 2 Features
- Jumbo Frame
- VLANs
- 802.1Q Static VLAN
- Q-in-Q Folder
- 802.1v Protocol VLAN Folder
- GVRP Settings
- Asymmetric VLAN Settings
- MAC-based VLAN Settings
- PVID Auto Assign Settings
- Port Trunking
- LACP Port Settings
- Traffic Segmentation
- IGMP Snooping Folder
- MLD Snooping Settings
- Port Mirror
- Loopback Detection Settings Page
- Spanning Tree Folder
- Forwarding & Filtering Folder
- LLDP Folder
- Quality of Service (QoS)
- Security
- Access Control List (ACL)
- Monitoring
- Save and Tools
- System Log Entries
- Trap List
Chapter 5: Security
Extreme Networks EAS 100-24t Switch Software Manual
130
To view the following window, click Security > Access Authentication Control > Local Enable
Password Settings:
In this window, the following parameters can be configured:
Click on the Apply button to accept the changes made.
MAC-based Access Control Folder
MAC-based Access Control is a method to authenticate and authorize access using either a port or host.
For port-based MAC, the method decides port access rights, while for host-based MAC, the method
determines the MAC access rights.
A MAC user must be authenticated before being granted access to a network. Both local authentication
and remote RADIUS server authentication methods are supported. In MAC-based Access Control, MAC
user information in a local database or a RADIUS server database is searched for authentication.
Following the authentication result, users achieve different levels of authorization.
Notes About MAC-based Access Control
There are certain limitations and regulations regarding the MAC-based Access Control:
1 Once this feature is enabled for a port, the Switch will clear the FDB of that port.
2 Ports that have been enabled for Link Aggregation, Port Security, or GVRP authentication cannot be
enabled for MAC-based Authentication.
MAC-based Access Control Settings
The following window is used to set the parameters for the MAC-based Access Control function on the
Switch. Here the user can set the running state, method of authentication, and RADIUS password to be
associated with the MAC-based Access Control function of the Switch.
Parameters Description
Old Local Enable Password
(Max: 15 characters)
If a password was previously configured for this entry, enter it here in order to
change it to a new password
New Local Enable Password Enter the new password that you wish to set on the Switch to authenticate
users attempting to access Administrator Level privileges on the Switch. The
user may set a password of up to 15 characters.
Confirm Local Enable Password Confirm the new password entered above. Entering a different password here
from the one set in the New Local Enabled field will result in a fail message.