Securing MAC Configuration Example

The following configuration example shows how to configure secure MAC on your Extreme Networks switch. To configure secure MAC:

1. Create a VLAN used for network login.
2. Configure the VLAN for network login.
3. Enable MAC-based network login on the switch.
4. Enable MAC-based network login on the ports used for authentication.
5. Specify one or more ports to accept authentication requests from a specific MAC address.

   In the following example, authentication requests from MAC address:

   • 00:00:00:00:00:10 are only accepted on ports 1:1 through 1:5
   • 00:00:00:00:00:11 are only accepted on ports 1:6 through 1:10
   • 00:00:00:00:00:12 are accepted on all other ports

create vlan nlvlan
configure netlogin vlan nlvlan
enable netlogin mac
enable netlogin ports 1:1-1:10 mac
configure netlogin add mac-list 00:00:00:00:00:10 ports 1:1-1:5
configure netlogin add mac-list 00:00:00:00:00:11 ports 1:6-1:10
configure netlogin add mac-list 00:00:00:00:00:12

To view your network login configuration, use the following commands:

show netlogin {port portlist vlan vlan_name} {dot1x {detail}} {mac} {web-based}

show netlogin mac-list