3Com 4210G Series - Page 583

5-9
[Sysname-acl-adv-3000] rule 0 deny ip destination 10.0.0.1 0
[Sysname-acl-adv-3000] quit
# Enable MAC authentication globally.
[Sysname] mac-authentication
# Specify the ISP domain for MAC authentication users.
[Sysname] mac-authentication domain 2000
# Specify the MAC authentication username type as MAC address, that is, using the MAC address of a
user as the username and password for MAC authentication of the user.
[Sysname] mac-authentication user-name-format mac-address
# Enable MAC authentication for port GigabitEthernet 1/0/1.
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication
After completing the above configurations, you can use the ping command to verify whether the ACL
3000 assigned by the RADIUS server functions.
C:\>ping 10.0.0.1
Pinging 10.0.0.1 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 10.0.0.1:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)
C:\>