5-3
z For RADIUS authentication, ensure that a route is available between the device and the RADIUS
server, and add the usernames and passwords on the server.
When adding usernames and passwords on the device or server, ensure that:
z The type of username and password must be consistent with that used for MAC authentication.
z All the letters in the MAC address to be used as the username and password must be in lower
case.
z The service type of the local users must be configured as lan-access.
Configuration Procedure
Follow these steps to configure MAC authentication:
To do… Use the command… Remarks
Enter system view system-view —
Enable MAC
authentication globally
mac-authentication
Required
Disabled by default
mac-authentication interface
interface-list
Enable MAC
authentication for specified
ports
interface interface-type
interface-number
mac-authentication
quit
Required
Use either approach.
Disabled by default
Specify the ISP domain for
MAC authentication
mac-authentication domain
isp-name
Optional
The default ISP domain is used
by default.
Set the offline detect timer
mac-authentication timer
offline-detect offline-detect-value
Optional
300 seconds by default
Set the quiet timer
mac-authentication timer quiet
quiet-value
Optional
60 seconds by default
Set the server timeout
timer
mac-authentication timer
server-timeout
server-timeout-value
Optional
100 seconds by default
Configure the username
and password for MAC
authentication
mac-authentication
user-name-format { fixed
[ account name ] [ password
{ cipher | simple } password ] |
mac-address [ with-hyphen |
without-hyphen ] }
Optional
By default, the user’s source
MAC address serves as the
username and password, with
“-“ in the MAC address.
To Next Page
Loading...
