MAC Address Authentication Enhanced Function Configuration 271
c
CAUTION:
■ If MAC authentication is enabled on a port, you cannot configure the
maximum number of dynamic MAC address entries for that port (through the
mac-address max-mac-count command), and vice versa.
■ If MAC authentication is enabled on a port, you cannot configure port security
(through the port-security enable command) on that port, and vice versa.
■ You can configure MAC authentication on a port before enabling it globally.
However, the configuration will not take effect unless MAC authentication is
enabled globally.
MAC Address
Authentication
Enhanced Function
Configuration
MAC Address
Authentication
Enhanced Function
Configuration Tasks
Set the user
name in fixed
mode for MAC
authentication
Set the user name in fixed
mode for MAC authentication
mac-authentica
tion authmode
usernamefixed
Optional
By default, the user
name is "mac" and no
password is configured.
Configure the user name mac-authentica
tion
authusername
username
Configure the password mac-authentica
tion
authpassword
password
Specify an ISP
domain for
MAC
authentication
mac-authentication domain isp-name Required
The default ISP domain
(default domain) is used
by default.
Configure the
MAC
authentication
timers
mac-authentication timer { offline-detect
offline-detect-value | quiet quiet-value |
server-timeout server-timeout-value }
Optional
The default timeout
values are as follows:
300 seconds for offline
detect timer;
60 seconds for quiet
timer; and
100 seconds for server
timeout timer
Table 204 Configure basic MAC authentication functions
Operation Command Remarks
Tab le 205 MAC address authentication enhanced function configuration tasks
Operation Description Related section
Configure a Guest VLAN Optional “Configuring a Guest VLAN”
Configure the maximum
number of MAC address
authentication users allowed
to access a port
Optional “Configuring the Maximum Number of
MAC Address Authentication Users Allowed
to Access a Port”
To Next Page
Loading...
