CLI Reference Guide-R04

Chapter 9 | General Security Measures
Network Access (MAC Address Authentication)
– 315 –
Example
Console(config)#interface ethernet 1/1
Console(config-if)#network-access port-mac-filter 1
Console(config-if)#
mac-authentication
intrusion-action
Use this command to configure the port response to a host MAC authentication
failure. Use the no form of this command to restore the default.
Syntax
mac-authentication intrusion-action {block-traffic | pass-traffic}
no mac-authentication intrusion-action
block-traffic - Blocks traffic if there is a host MAC authentication failure.
pass-traffic - Still passes traffic despite there is a host MAC authentication
failure.
Default Setting
Block Traffic
Command Mode
Interface Configuration
Example
Console(config-if)#mac-authentication intrusion-action pass-traffic
Console(config-if)#
mac-authentication
max-mac-count
Use this command to set the maximum number of MAC addresses that can be
authenticated on a port via MAC authentication. Use the no form of this command
to restore the default.
Syntax
mac-authentication max-mac-count count
no mac-authentication max-mac-count
count - The maximum number of MAC-authenticated MAC addresses
allowed. (Range: 1-1024)
Default Setting
1024
Command Mode
Interface Configuration