CLI Reference Guide-R07

Chapter 9 | General Security Measures
Network Access (MAC Address Authentication)
– 281 –
mac-authentication
intrusion-action
Use this command to configure the port response to a host MAC authentication
failure. Use the no form of this command to restore the default.
Syntax
mac-authentication intrusion-action {block traffic | pass traffic}
no mac-authentication intrusion-action
Default Setting
Block Traffic
Command Mode
Interface Configuration
Example
Console(config-if)#mac-authentication intrusion-action block-traffic
Console(config-if)#
mac-authentication
max-mac-count
Use this command to set the maximum number of MAC addresses that can be
authenticated on a port via MAC authentication. Use the no form of this command
to restore the default.
Syntax
mac-authentication max-mac-count count
no mac-authentication max-mac-count
count - The maximum number of MAC-authenticated MAC addresses
allowed. (Range: 1-1024)
Default Setting
1024
Command Mode
Interface Configuration
Example
Console(config-if)#mac-authentication max-mac-count 32
Console(config-if)#