Netgear XCM8806 - 8800 SERIES 6-SLOT CHASSIS SWITCH ユーザーズマニュアル

ページ / 968
  Chapter 16.  Network Login    
|
    
423
NETGEAR 8800 User Manual 
To associate a MAC address with one or more ports, specify the 
ports
 option when using the 
following command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} 
{<password>} {ports <port_list>}
 
You must enable MAC-based network login on the switch and the specified ports. If 
MAC-based network login is not enabled on the specified port(s), the switch displays a 
warning message similar to the following:
WARNING: Not all specified ports have MAC-Based NetLogin enabled.
For a sample configuration, se
Adding and Deleting MAC Addresses
To add a MAC address to the table, use the following command:
configure netlogin add mac-list [<mac> {<mask>} | default] {encrypted} 
{<password>} {ports <port_list>}
 
To remove a MAC address from the table, use the following command:
configure netlogin delete mac-list [<mac> {<mask>} | default]
 
Displaying the MAC Address List
To display the MAC address table, use the following command:
show netlogin mac-list
When a client needs authentication the best match will be used to authenticate to the server.
MAC-based authentication is VR aware, so there is one MAC list per VR.
Assume we have a supplicant with MAC address 00:04:96:05:40:00, and the switch has the 
following table:
MAC Address/Mask        Password (encrypted)      Port(s)
--------------------  ----------------------  --------------
00:00:00:00:00:10/48    <not configured>          1:1-1:5
00:00:00:00:00:11/48    <not configured>          1:6-1:10
00:00:00:00:00:12/48    <not configured>          any
00:01:30:70:0C:00/48    yaqu                      any
00:01:30:32:7D:00/48    ravdqsr                   any
00:04:96:00:00:00/24    <not configured>          any
The user name used to authenticate against the RADIUS server would be “000496000000”, 
as this is the supplicants MAC address with the configured mask applied. 
Note that the commands are VR aware, and therefore one MAC list table exists per VR.