MAC Locking


This tab displays the settings for locked MAC address. MAC Locking lets you lock a MAC address to a specific switch or port on a switch so that the end-system can only access the network from that port or switch. If the end-system tries to authenticate on a different switch/port, it is rejected or assigned a specific policy. You can add or edit MAC locks from the End-Systems tab.

  NOTE: MAC Locking to a specific port on a switch is based on the port interface name (e.g. fe.5.1). If a switch board is moved to a different slot in a chassis, or if a stack reorders itself, this name changes and breaks the MAC Locking settings.

MAC Address
The locked MAC address.
Switch IP
The IP address of the switch on which the MAC address is locked.
Port
The port on the switch for which the MAC address is locked.
Lock to Switch and Port
Indicates whether the MAC address is locked to a specific port on the switch, and enter the port interface name.
Failed Action
The action ExtremeCloud IQ Site Engine takes when this MAC address tries to authenticate on a different port and/or switch:
  • Reject - The authentication request is rejected.
  • Use Policy - Use the drop-down list to select the policy that you want applied. This policy must exist in the Policy tab and be enforced to the switches in your network.

For information on related help topics: