Здравствуйте. Хочу использовать MAC-Based Access Control Local для авторизации хоста на порту. Делаю так:
1)Создаю вланы config vlan default delete 12 create vlan v10 tag 10 config vlan v10 add untagged 12
2)Включаю MAC Access Control enable mac_based_access_control create mac_based_access_control guest_vlan default config mac_based_access_control guest_vlan ports 11 config mac_based_access_control ports 11 state enable config mac_based_access_control method local
3)Создаю аккаунт create mac_based_access_control_local mac 00-E0-4D-53-53-5C vlan v10
В итоге, хост как бы аутентифицирован, но желаемого перемещения порта 11 во влан v10 не происходит. То ли я что-то не так делаю, то ли чего-то недопонимаю, подскажите. Ниже привожу результаты настройки:
DES-3200-18:4#show mac_based_access_control Command: show mac_based_access_control MAC Based Access Control ------------------------------------ State : Enabled Method : Local Authentication Failover : Disabled Password : default Max Users : 128 Guest VLAN : default Guest VLAN VID : 1 Guest VLAN Member Ports: 11
DES-3200-18:4#show mac_based_access_control_local Command: show mac_based_access_control_local
MAC Address VLAN Name VID ----------------- ------------------------------- ------ 00-E0-4D-53-53-5C v10 10
DES-3200-18:4#show mac_based_access_control ports 11-12 Command: show mac_based_access_control ports 11-12 Port State Aging Time Hold Time Auth Mode Max Users (mins) (secs) ------ ----------- ------------ --------- ---------------- ------------- 11 Enabled 1440 300 Port_based 128 12 Enabled 1440 300 Port_based 128
DES-3200-18:4#show mac_based_access_control auth_state Command: show mac_based_access_control auth_state
Port MAC Address Auth State VID Priority Aging Time/ Hold Time ---- -------------------------- ------------------ ------ -------- ----------------- 11 00-E0-4D-53-53-5C(P) Authenticated 1 - 86241
Total Authenticating Hosts : 0 Total Authenticated Hosts : 1 Total Blocked Hosts : 0
DES-3200-18:4#show vlan Command: show vlan
VID : 1 VLAN Name : default VLAN Type : Static Advertisement : Enabled Member Ports : 1-11,13-18 Static Ports : 1-11,13-18 Current Tagged Ports : Current Untagged Ports : 1-11,13-18 Static Tagged Ports : Static Untagged Ports : 1-11,13-18 Forbidden Ports :
VID : 10 VLAN Name : v10 VLAN Type : Static Advertisement : Disabled Member Ports : 12 Static Ports : 12 Current Tagged Ports : Current Untagged Ports : 12 Static Tagged Ports : Static Untagged Ports : 12 Forbidden Ports :
|