Filter
Top Products
xStack® DGS-3420 Series Layer 2 Managed Stackable Gigabit Switch CLI Reference Guide
523
52-5 config mac_based_access_control guest_vlan ports
Description
This command is used to put the specified port in guest VLAN mode. For those ports not contained
in the port list, they are in non-guest VLAN mode.For detailed information about the operation of
guest VLAN mode, please see the description for configuring the MAC-based access control port
command.
Format
config mac_based_access_control guest_vlan ports <portlist>
Parameters
<portlist>
- When a port is configured as gurest VLAN member port, this port will move to guest
VLAN if it’s MAC-based access control state is enable.
Restrictions
Only Administrator, Operator and Power-User level users can issue this command.
Example
To configure the MAC-based access control guest VLAN membership for port 1 to 8:
DGS-3420-28SC:admin# config mac_based_access_control guest_vlan ports 1-8
Command: config mac_based_access_control guest_vlan ports 1-8
Success.
DGS-3420-28SC:admin#
52-6 config mac_based_access_control ports
Description
This command is used to configure the MAC-based access control setting. When the MAC-based
access control function is enabled for a port, and the port is not a MAC-based access control guest
VLAN member, the user who is attached to this port will not be forwarded unless the user passes
the authentication. A user that does not pass the authentication will not be serviced by the switch.
If the user passes the authentication, the user will be able to forward traffic operated under the
assigned VLAN.
When the MAC-based access control function is enabled for a port, and the port is a MAC-based
access control guest VLAN member, the port(s) will be removed from the original VLAN(s)
member ports, and added to MAC-based access control guest VLAN member ports. Before the
authentication process starts, the user is able to forward traffic under the guest VLAN. After the
authentication process, the user will be able to access the assigned VLAN.
If the port authorize mode is port based mode, when the port has been moved to the authorized
VLAN, the subsequent users will not be authenticated again. They will operate in the current
authorized VLAN. If the port authorize mode is host based mode, then each user will be authorized
individually and be capable of getting its own assigned VLAN.