H3C S5120-EI Series - Configuring a Guest VLAN; Configuration Prerequisites; Configuration Procedure

1-4
To do… Use the command… Remarks
Set the server timeout
timer
mac-authentication timer
server-timeout
server-timeout-value
Optional
100 seconds by default
Configure the username
and password for MAC
authentication
mac-authentication
user-name-format { fixed
[ account name ] [ password
{ cipher | simple } password ] |
mac-address [ with-hyphen |
without-hyphen ] }
Optional
By default, the user’s source
MAC address serves as the
username and password,
without “-“ in the MAC address.
z You can configure MAC authentication for ports first. However, the configuration takes effect only
after you enable MAC authentication globally.
z Enabling MAC authentication on a port is mutually exclusive with adding the port to an aggregation
group.
z For details about the default ISP domain, refer to AAA Configuration in the Security Volume.
Configuring a Guest VLAN
Configuration Prerequisites
z Enable MAC authentication.
z Enable MAC VLAN on the port.
z Create the VLAN to be specified as the guest VLAN.
Configuration Procedure
Follow these steps to configure an MGV:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet interface
view
interface interface-type
interface-number
—
Configure an MGV for MAC
authentication
mac-authentication guest-vlan
guest-vlan-id
Required
Not configured by default