Port Authentication; Configuring The Ieee 802.1X Authentication Function For The Entire System; Configuring The Mac Authentication Function For The Entire System - Yamaha L2 Command Reference Manual

[Description]
Sets the LACP port priority order.
If this command is executed with the "no" syntax, the setting returns to the default value.
[Note]
If up to eight LAN/SFP ports are combined into an LACP logical interface, they are immediately combined into the LACP
logical interface; ports in excess of eight are standby ports used in case of a malfunction.
In such cases, the priority order between the LAN/SFP ports are evaluated, and they are combined starting with the
highestpriority port.
The priority order is evaluated as follows.
1 ) Priority is given to ports with a lower LACP port priority.
2 ) If the LACP port priority is the same, priority is given to the lower interface number.
If an SFP port is to be given priority, its LACP port priority must be set lower than other ports.
[Example]
Set the LACP port priority order to 1024.
SWR2311P(config-if)#channel-group 1 mode active
SWR2311P(config-if)#lacp port-priority 1024

5.3 Port authentication

5.3.1 Configuring the IEEE 802.1X authentication function for the entire system

[Syntax]
aaa authentication dot1x
no aaa authentication dot1x
[Initial value]
no aaa authentication dot1x
[Input mode]
global configuration mode
[Description]
Enables IEEE 802.1X authentication for the entire system.
If this command is executed with the "no" syntax, disables IEEE 802.1X authentication for the entire system.
Use a RADIUS server for authentication on which the radius-server host command has been configured.
[Note]
In order to actually use IEEE 802.1X authentication, you need to enable IEEE 802.1X authentication on the applicable interface
as well.(dot1x port-control command)
[Example]
Enable IEEE 802.1X authentication for the entire system.
SWR2311P(config)#aaa authentication dot1x

5.3.2 Configuring the MAC authentication function for the entire system

[Syntax]
aaa authentication auth-mac
no aaa authentication auth-mac
[Initial value]
no aaa authentication auth-mac
[Input mode]
global configuration mode
[Description]
Enables MAC authentication for the entire system.
If this command is executed with the "no" syntax, disables MAC authentication for the entire system.
Use a RADIUS server for authentication on which the radius-server host command has been configured.
Command Reference | Interface control | 133