Mac Address Authentication Configuration
Chapter 35. Mac Address
Authentication Configuration
35.1 Mac Authentication Overview
MAC address authentication is based on the port and the mac address of the user access
to network access control function modules.Initially, the switch mac address table does not
exist the user's mac address table entries, the first user's message will reach the trigger
switch mac address authentication, the authentication process does not require user
participation (such as user name and password input related) , after the passage of the user
authentication will be added to switch mac address mac address table after the user's traffic
can be the mac address table entries directly from the content to be forwarded.
Authentication supports two authentication methods, the time domain in the configuration
AAA configuration options:
Through the radius server for authentication;
By the local user database for authentication;
35.2 Mac Address Authentication
Configuration
35.2.1 AAA-Related Configuration
MAC authentication which need to be configured to use AAA authentication for domain
authentication.The radius server for authentication or choose the local user database
authentication in the AAA authentication domain.
If not configured, use the default system configuration, certification domain.
When both are not configured, you can not be authenticated.
In the absence of user participation, mac address authentication in the authentication
needs to construct associated user name and password, and now there are two methods:
a) mac address mode, in such a way, using the mac address as the user name and
password authentication, fixed-length string of 12 characters, such as the mac address is
00:01:7a: 80:40:2b, the user name and password is "00017a80402b";
b) Fixed user name and password, in this way, the user configuration of fixed user name
and password;