DGS-3710 Series Layer 2 Managed Gigabit Switch CLI Reference Guide
398
Format
config mac_based_access_control ports [<portlist> | all] {state [enable | disable] | mode
[port_based | host_based] | aging_time [infinite | <min 1-1440>] | block_time [infinite |<sec
0-300>] | max_users [<value 1-1000> | no_limit]}(1)
Parameters
<portlist>
- Specifies a range of ports to configure the MAC-based access control settings
all
- Specifies to select all the ports.
state
- Specifies whether the MAC-based access control function is enabled or disabled.
enable
- Specifies to enable the MAC-based access control function.
disable
- Specifies to disable the MAC-based access control function.
mode
- Specifies either port-based or host-based.
port_based
- This means that all users connected to a port share the first authentication
result.
host_based
- This means that each user can have its own authentication result. If the switch
does not support MAC-based VLANs, the switch will not allow the option host_based for
ports that are in guest VLAN mode.
aging_time
- Specifies a time period during which an authenticated host will be kept in the
authenticated state. When the aging time is timed-out, the host will be moved back to
unauthenticated state.
infinite
- Specifies an unlimited aging time.
<min 1-1440>
- Specifies the age-out time, in minutes, between 1 and 1440.
block_time
- Specifies the blocking time, in seconds, between 0 and 300.
infinite
– Specifies that the blocking time will be set to infinite.
<sec 0-300>
- Specifies the blocking time. The blocking time value must be between 0 and
300 seconds.
max_users
- Specifies the number of maximum users.
<value 1-1000>
- Specifies the maximum number of users between 1 and 1000.
no_limit
- Specifies an unlimited number of users.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example
To configure the port state for ports 1 to 8:
DGS-3710-12C:admin# config mac_based_access_control ports 1-8 state enable
Command: config mac_based_access_control ports 1-8 state enable
Success.
DGS-3710-12C:admin#
39-7
create mac_based_access_control
Description
This command is used to create a MAC-based access control guest VLAN.