Netgear XCM8806 - 8800 SERIES 6-SLOT CHASSIS SWITCH 사용자 설명서

다운로드
페이지 968
424
   
|   
Chapter 16.  Network Login  
NETGEAR 8800 User Manual 
Configuring Reauthentication Period
To configure the reauthentication period for network login MAC-based authentication, use the 
following commands:
configure netlogin mac timers reauth-period
 
This timer is applicable only in the case where the client is authenticated in authentication 
failure vlan or authentication service unavailable vlan and the RADIUS server provides no 
session-timeout attribute during authentication. If the switch does receive the session-timeout 
attribute during authentication, the switch uses that value to set the reauthentication period. 
For more information on RADIUS server attributes, see 
Secure MAC Configuration Example
The following configuration example shows how to configure secure MAC on your NETGEAR 
switch. To configure secure MAC:
•     
Create a VLAN used for network login. 
•     
Configure the VLAN for network login.
•     
Enable MAC-based network login on the switch.
•     
Enable MAC-based network login on the ports used for authentication.
•     
Specify one or more ports to accept authentication requests from a specific MAC address.
In the following example, authentication requests from MAC address:
•     
00:00:00:00:00:10 are only accepted on ports 1:1 through 1:5 
•     
00:00:00:00:00:11 are only accepted on ports 1:6 through 1:10 
•     
00:00:00:00:00:12 are accepted on all other ports
create vlan nlvlan
configure netlogin vlan nlvlan
enable netlogin mac
enable netlogin ports 1:1-1:10 mac
configure netlogin add mac-list 00:00:00:00:00:10 ports 1:1-1:5
configure netlogin add mac-list 00:00:00:00:00:11 ports 1:6-1:10
configure netlogin add mac-list 00:00:00:00:00:12
To view your network login configuration, use one of the following commands:
•     
show netlogin {port <portlist> vlan <vlan_name>} {dot1x {detail}} {mac} 
{web-based}
 
•     
show netlogin mac-list