Enabling Mac Replace - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Configuring 802.1x Authentication
Command
Step 3
end
Step 4
show running-config
Step 5
copy running-config startup-config
This example shows how to globally enable MAC move on a switch:
Switch(config)# authentication mac-move permit
Enabling MAC Replace
To enable MAC replace, the switch must be running the LAN base image.
Note
MAC replace allows a host to replace an authenticated host on a port.
Beginning in privileged EXEC mode, follow these steps to enable MAC replace on an interface. This
procedure is optional.
Command
Step 1
configure terminal
Step 2
interface interface-id
Step 3
authentication violation {protect |
replace | restrict | shutdown}
Step 4
end
Step 5
show running-config
Step 6
copy running-config startup-config
This example shows how to enable MAC replace on an interface:
Switch(config)# interface gigabitethernet2/0/2
Switch(config-if)# authentication violation replace
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
10-52
Chapter 10
Purpose
Return to privileged EXEC mode.
(Optional) Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the port to be configured, and enter interface configuration mode.
Use the replace keyword to enable MAC replace on the interface. The
port removes the current session and initiates authentication with the new
host.
The other keywords have these effects:
protect: the port drops packets with unexpected MAC addresses
•
without generating a system message.
restrict: violating packets are dropped by the CPU and a system
•
message is generated.
shutdown: the port is error disabled when it receives an unexpected
•
MAC address.
Return to privileged EXEc mode.
Verify your entries.
(Optional) Saves your entries in the configuration file.
Configuring IEEE 802.1x Port-Based Authentication
OL-26520-01
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
