xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
444
DGS-3627:admin# config mac_based_access_control ports 1-8 max_users no_limit
Command: config mac_based_access_control ports 1-8 max_users no_limit
Success.
To configure the MAC-based Access Control timer parameters to have an infinite aging time and a block time of 120
seconds on ports 1 to 8:
DGS-3627:admin# config mac_based_access_control ports 1-8 aging_time infinite block_time
120
Command: config mac_based_access_control ports 1-8 aging_time infinite block_time 120
Success.
create mac_based_access_control guest_vlan
Purpose Used to assign a static 802.1Q VLAN as a MAC-based Access Control guest VLAN.
Syntax
create mac_based_access_control [guest_vlan <vlan_name 32> | guest_vlanid <vlanid
1-4094>]
Description Used to assign a static 802.1Q VLAN as a MAC-based Access Control guest VLAN.
This command can be used to manage unauthenticated hosts in this guest VLAN, that is, the
unauthenticated host will stay in this guest VLAN until a successful authentication attempt.
Parameters
guest_vlan - Specify MAC-based Access Control guest VLAN by name, it must be a static 1Q
VLAN.
guest_vlanid - Specify MAC-based Access Control guest VLAN by VID, it must be a static 1Q
VLAN.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To create a MAC-based Access Control guest VLAN:
DGS-3627:admin# create mac_based_access_control guest_vlan VLAN8
Command: create mac_based_access_control guest_vlan VLAN8
Success.
delete mac_based_access_control guest_vlan
Purpose Used to remove a MAC-based Access Control guest VLAN.
Syntax
delete mac_based_access_control [guest_vlan <vlan_name 32> | guest_vlanid < vlanid
1-4094>]
Description Use this command to remove a MAC-based Access Control guest VLAN. When the guest
VLAN is removed, the guest VLAN function will be disabled.
Parameters
guest_vlan - Specifies the name of the MAC-based Access Control’s guest VLAN
guest_vlanid - Specifies the VID of the MAC-based Access Control’s guest VLAN
Restrictions Only Administrator and Operator-level users can issue this command.