Blackhole MAC attribute assignment

The device supports the blackhole MAC attribute assigned by the RADIUS authentication server through CoA messages for users that have passed MAC authentication. Upon receiving a CoA message that contains the blackhole MAC attribute for a user that has passed MAC authentication, the device performs the following operations:

  1. Logs off the user.

  2. Marks the MAC address of the user as a silent MAC address and starts a quiet timer for the MAC address.

The quiet timer is fixed at 10 minutes. Within the quite timer, the device drops all packets from the MAC address. When the quiet timer expires, the device can authenticate packets from the MAC address.

To display silent MAC addresses, use the display mac-authentication command.