Netgear XCM8806 Chassis User Manual - Page 424

NETGEAR 8800 User Manual Configuring Reauthentication Period To configure the reauthentication period for network login MAC-based authentication, use the following commands: configure netlogin mac timers reauth-period This timer is applicable only in the case where the client is authenticated in authentication failure vlan or authentication service unavailable vlan and the RADIUS server provides no session-timeout attribute during authentication. If the switch does receive the session-timeout attribute during authentication, the switch uses that value to set the reauthentication period. For more information on RADIUS server attributes, see Configuring the RADIUS Client on page 475. Secure MAC Configuration Example The following configuration example shows how to configure secure MAC on your NETGEAR switch. To configure secure MAC: • Create a VLAN used for network login. • Configure the VLAN for network login. • Enable MAC-based network login on the switch. • Enable MAC-based network login on the ports used for authentication. • Specify one or more ports to accept authentication requests from a specific MAC address. In the following example, authentication requests from MAC address: • 00:00:00:00:00:10 are only accepted on ports 1:1 through 1:5 • 00:00:00:00:00:11 are only accepted on ports 1:6 through 1:10 • 00:00:00:00:00:12 are accepted on all other ports create vlan nlvlan configure netlogin vlan nlvlan enable netlogin mac enable netlogin ports 1:1-1:10 mac configure netlogin add mac-list 00:00:00:00:00:10 ports 1:1-1:5 configure netlogin add mac-list 00:00:00:00:00:11 ports 1:6-1:10 configure netlogin add mac-list 00:00:00:00:00:12 To view your network login configuration, use one of the following commands: • show netlogin {port vlan } {dot1x {detail}} {mac} {web-based} • show netlogin mac-list 424 | Chapter 16. Network Login