Configuration Guide User guide

1460 BigIron RX Series Configuration Guide
53-1002484-04
Security/Management
E
MAC authentication
ip tcp tcp-security “Disabling the TCP security enhancement” on
page 1081
show statistics dos-attack [| begin
<expression> | exclude
<expression> | include <expression>]
“Displaying statistics due DoS attacks” on page 1081
Commands See ...
clear auth-mac-table <portnum> “Clearing authenticated MAC addresses” on
page 1015
clear auth-mac-table “Clearing authenticated MAC addresses” on
page 1015
mac-authentication apply-mac-auth-filter
<filter-id> “Defining MAC address filters” on page 1010
mac-authentication auth-fail-action block-traffic “Specifying the authentication-failure action” on
page 1009
mac-authentication auth-fail-action restrict-vlan
[
<vlan-id>]
“Specifying the authentication-failure action” on
page 1009
mac-authentication auth-fail-vlan-id
<vlan-id> “Specifying the authentication-failure action” on
page 1009
mac-authentication auth-passwd-format xxxx.xxxx.xxxx |
xx-xx-xx-xx-xx-xx | xxxxxxxxxxxx
“Specifying the format of the MAC addresses sent to
the RADIUS server” on page 1009
mac-authentication clear-mac-session
<mac-address> “Clearing authenticated MAC addresses” on
page 1015
mac-authentication disable-aging [denied-mac-only |
permitted-mac-only]
“Disabling aging for authenticated MAC addresses”
on page 1015
mac-authentication enable [
<portnum> | all] “Enabling multi-device port authentication” on
page 1008
mac-authentication enable-dynamic-vlan “Configuring dynamic VLAN assignment” on
page 1011
mac-authentication mac-filter
<filter> “Defining MAC address filters” on page 1010
mac-authentication max-age
<seconds> “Specifying the aging time for blocked MAC
addresses” on page 1016
mac-authentication move-back-to-old-vlan disable |
port-configured-vlan | port-restrict-vlan |
system-default-vlan
“Specifying to which VLAN a port is moved after its
RADIUS-specified VLAN assignment expires” on
page 1014
mac-authentication no-override-restrict-vlan “Configuring dynamic VLAN assignment” on
page 1011
mac-authentication save-dynamicvlan-to-config “Saving dynamic VLAN assignments to the running
configuration file” on page 1014
show auth-mac-address
<mac-address> | <ip-address> |
<portnum>
“Displaying multi-device port authentication
information for a specific MAC address or port” on
page 1020
show auth-mac-address configuration “Displaying multi-device port authentication
configuration information” on page 1017
Commands See ...