Configuration Guide User guide

1902 FastIron Configuration Guide
53-1002494-02
Web authentication options configuration
The above commands configure ports 3 and 6 – 10 as trusted ports.
Syntax: trust-port ethernet <port> [to <port>]
Specify the port variable in one of the following formats:
• FWS, FCX, and ICX stackable switches – stack-unit/slotnum/portnum
• FSX 800 and FSX 1600 chassis devices – slotnum/portnum
• ICX devices – slotnum/portnum
• FESX compact switches – portnum
Specifying hosts that are permanently authenticated
Certain hosts, such as DHCP server, gateway, printers, may need to be permanently authenticated.
Typically, these hosts are managed by the network administrator and are considered to be
authorized hosts. Also, some of these hosts (such as printers) may not have a Web browser and will
not be able to perform the Web Authentication.
To permanently authenticate these types of hosts, enter a command such as the following at the
"webauth" configuration level.
Brocade(config-vlan-10-webauth)#add mac 0004.80eb.2d14 duration 0
Brocade(config-vlan-10-webauth)#add mac 0007.e90e.de3b duration 0
Syntax: [no] add mac <mac-address> duration <seconds> | ethernet <port> duration <seconds>
Syntax: no add mac <mac-address>
Specify the port variable in one of the following formats:
• FWS, FCX, and ICX stackable switches – stack-unit/slotnum/portnum
• FSX 800 and FSX 1600 chassis devices – slotnum/portnum
• ICX devices – slotnum/portnum
• FESX compact switches – portnum
<seconds> specifies how long the MAC address remains authenticated. Enter 0 – 128000
seconds. The default is the current value of reauth-time. A value of "0" means that Web
Authentication for the MAC address will not expire.
Instead of just entering a duration for how long the MAC address remains authenticated, you can
specify the MAC address to be added by the specified port that is a member of the VLAN. To do this,
enter values for the ethernet <port> duration <seconds> option. Enter the port number and the
number of seconds the MAC address remains authenticated.
Entering a no add mac <mac-address> duration <seconds> | ethernet <port> duration <seconds>
command sets duration and ethernet to their default values. If you want to remove a host, enter the
no add mac <mac-address> command.
NOTE
If a MAC address is statically configured, this MAC address will not be allowed to be dynamically
configured on any port.