3Com Switch 4800G 24-Port - Configuring MAC Authentication

Configuring MAC Authentication 741
Configuring MAC
Authentication
Configuration
Prerequisites
■ Create and configure an ISP domain.
■ For local authentication, create the local users and configure the passwords.
■ For RADIUS authentication, ensure that a route is available between the device
and the RADIUS server.
c
CAUTION: For local authentication
■ The type of username and password of a local user must be consistent with
that used for MAC authentication.
■ All the letters in the MAC address to be used as the username and password of
a local user must be in lower case.
■ The service type of the local user must be configured as lan-access.
Configuration Procedure Follow these steps to configure MAC authentication:
n
■ You can configure MAC authentication for various ports in advance. The
configuration, however, takes effect only after the global MAC authentication
is enabled.
To do… Use the command… Remarks
Enter system view system-view -
Enable MAC authentication
globally
mac-authentication Required
Disabled by default
Enable MAC authentication
for specified ports
mac-authentication
interface interface-list
Required
Disabled by default
interface interface-type
interface-number
mac-authentication
quit
Specify the ISP domain for
MAC authentication
mac-authentication
domain isp-name
Optional
The default ISP domain
(system) is used by default.
Set the offline detect timer mac-authentication timer
offline-detect
offline-detect-value
Optional
300 seconds by default
Set the quiet timer mac-authentication timer
quiet quiet-value
Optional
60 seconds by default
Set the server timeout timer mac-authentication timer
server-timeout
server-timeout-value
Optional
100 seconds by default
Configure the username and
password for MAC
authentication
mac-authentication
user-name-format { fixed
[ account name ] [ password
{ cipher | simple } password ]
| mac-address
[ with-hyphen |
without-hyphen ]}
Optional
By default, the user’s source
MAC address serves as the
username and password, and
the MAC address does not
contain hyphen “-”.