CLI Reference Guide-R04

Chapter 9 | General Security Measures
Network Access (MAC Address Authentication)
– 305 –
network-access aging Use this command to enable aging for authenticated MAC addresses stored in the
secure MAC address table. Use the no form of this command to disable address
aging.
Syntax
[no] network-access aging
Default Setting
Disabled
Command Mode
Global Configuration
network-access dynamic-qos Enables the dynamic quality of service feature IC
network-access dynamic-vlan Enables dynamic VLAN assignment from a RADIUS server IC
network-access guest-vlan Specifies the guest VLAN IC
network-access link-detection Enables the link detection feature IC
network-access link-detection
link-down
Configures the link detection feature to detect and act
upon link-down events
IC
network-access link-detection
link-up
Configures the link detection feature to detect and act
upon link-up events
IC
network-access link-detection
link-up-down
Configures the link detection feature to detect and act
upon both link-up and link-down events
IC
network-access max-mac-count Sets the maximum number of MAC addresses that can be
authenticated on a port via all forms of authentication
IC
network-access mode
mac-authentication
Enables MAC authentication on an interface IC
network-access port-mac-filter Enables the specified MAC address filter IC
mac-authentication
intrusion-action
Determines the port response when a connected host
fails MAC authentication.
IC
mac-authentication
max-mac-count
Sets the maximum number of MAC addresses that can be
authenticated on a port via MAC authentication
IC
clear network-access Clears authenticated MAC addresses from the address
table
PE
show network-access Displays the MAC authentication settings for port
interfaces
PE
show network-access
mac-address-table
Displays information for entries in the secure MAC
address table
PE
show network-access mac-filter Displays information for entries in the MAC filter tables PE
Table 55: Network Access Commands (Continued)
Command Function Mode