configure identity-management ports

configure identity-management {add | delete} ports [port_list | all]

Description

Adds or deletes identity management for the specified ports.

Syntax Description

add

Enables identity management on the specified port list.

delete

Disables identity management on the specified port list.

port_list

Specifies the ports to which this command applies.

all

Specifies that this command applies to all ports.

Default

No ports are in the identity management enabled port list.

Usage Guidelines

If neither the add nor the delete keyword is entered, identity management is enabled on the specified port list, and the new port list overrides any previous port list.

If identity management is enabled on a port and a user or device is connected to it, information about the user or device is present in the identity management database. If this port is removed from the identity-management enabled port list, the user or device information remains in the data base until the user logs out or the device disconnects. However, once a port is deleted from enabled port list, no new information is added to the identity management database for that port.

Note

Note

Kerberos identities are not detected when both server and client ports are added to identity management.

Example

The following command enables identity management on ports 2:3 and 2:5:

configure identity-management add ports 2:3,2:5

History

This command was first available in ExtremeXOS 12.4.

Platform Availability

This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.