mac-filtering on switch

Alfonso said:

+1 for Mac filtering and port security on Nebula switches.

I see with the release of Nebula Control Center v17, that Nebula Cloud MAC Authentication has been rolled out to more models of switch, incuding the GS1920 range that I have :)

Is there any guide on how to go about configuring it?

As above, I can go to Confugure > Switches > Authentication

I can choose "Nebula cloud authentication" from the drop down menu and fill in the Authentication policy settings.  The "Authentication ports" column "0" is clickable, which links to the Switch Ports page with a "(policy=Test)" search filter applied.  No ports with this policy are found, so I guess I have to enable the policy on each port, but cannot see a way to do so.

How do I enable cloud MAC authentication on a port?

This works well, easy to use, and improves the security of the network. A few questions and observations.

What is the purpose of the "MAC limitation" setting? I've tried increasing and decreasing the number, but cannot see what it does.

If I have an authorized, active device plugged into a port on the switch, and I then revoke it's authorization or delete it from the allowed MAC list, the device is still able to communicate. I left it for over and hour and the device was still communicating. I've found the switch port needs to be disabled and reenabled to force a reconnection and prevent the device communicating. Not sure if this is the desired result, as if I go to the Clients page, select a device and add it to the Policy > Block List, it is prevented from communicating within a few seconds.

Testing this on a GS1920-8HP Firmware v4.80(ABKZ.0).

When adding a new device to the Cloud Authentication list, it can be given a description.

It would be good if the Description entered was automatically used as the description on the Clients list. Currently the Cloud Authentication and Clients descriptions are independent so the device has to be named in both locations.