Configuration Guide User guide

1904 FastIron Configuration Guide
53-1002494-02
Web authentication options configuration
This command clears all the authenticated hosts in VLAN 25.
To clear a particular host in a Web authentication VLAN, enter a command such as the following.
Brocade#clear webauth vlan 25 authenticated-mac 1111.2222.3333
This command clears host 1111.2222.3333 from VLAN 25.
Syntax: clear webauth vlan <vlan-id> authenticated-mac [<mac-address>]
Setting and clearing the block duration for web
authentication attempts
After users exceed the limit for Web Authentication attempts, specify how many seconds users
must wait before the next cycle of Web Authenticated begins. Enter a command such as the
following.
Brocade(config-vlan-10-webauth)#block duration 4
Syntax: [no] block duration <seconds>
Users cannot attempt Web Authentication during this time.
Enter 0–128000 seconds. The default is 90 seconds, and entering 0 means that the MAC address
is infinitely blocked.
To unblock the MAC address, wait until the block duration timer expires or enter a command such
as the following.
Brocade(config-vlan-10-webauth)#clear webauth vlan 10 block-mac 000.000.1234
Syntax: clear webauth vlan <vlan-id> block-mac [<mac-address>]
If you do not enter a <mac-address>, then all the entries for the specified VLAN will be cleared.
Manually blocking and unblocking a specific host
A host can be temporarily or permanently blocked from attempting Web Authentication by entering
a command such as the following.
Brocade(config-vlan-10-webauth)#block mac 0123.17d1.0a3d duration 4
Syntax: [no] block mac <mac-address> duration <seconds>
Syntax: no block mac <mac-address>
Enter 0 – 128000 for <seconds>. The default is the current value of block duration command.
Entering a value of "0" means the MAC address is blocked permanently.
Entering no block mac <mac-address> duration <seconds> resets duration to its default value.
You can unblock a host by entering the no block mac <mac-address> command.
Limiting the number of authenticated hosts
You can limit the number of hosts that are authenticated at any one time by entering a command
such as the following.