Securing MAC Configuration Example

The following configuration example shows how to configure secure MAC on your Extreme Networks switch. To configure secure MAC:

Create a VLAN (Virtual LAN) used for network login.
Configure the VLAN for network login.
Enable MAC-based network login on the switch.
Enable MAC-based network login on the ports used for authentication.
Specify one or more ports to accept authentication requests from a specific MAC address.
In the following example, authentication requests from MAC address:
- 00:00:00:00:00:10 are only accepted on ports 1:1 through 1:5
- 00:00:00:00:00:11 are only accepted on ports 1:6 through 1:10
- 00:00:00:00:00:12 are accepted on all other ports

create vlan nlvlan
configure netlogin vlan nlvlan
enable netlogin mac
enable netlogin ports 1:1-1:10 mac
configure netlogin add mac-list 00:00:00:00:00:10 ports 1:1-1:5
configure netlogin add mac-list 00:00:00:00:00:11 ports 1:6-1:10
configure netlogin add mac-list 00:00:00:00:00:12

To view your network login configuration, use the following commands:

show netlogin {port portlist vlan vlan_name} {dot1x {detail}} {mac} {web-based}

show netlogin mac-list

Published March 2020prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback