HP 5120 SI Series

99
Configuring MAC authentication on a port
Follow these steps to configure MAC authentication on a port:
To do… Use the command… Remarks
Enter system view system-view —
Enable MAC
authentication for
specified ports
In system view
mac-authentication interface
interface-list
Required
Use either approach.
Disabled by default
In Layer 2 Ethernet
interface view
interface interface-type
interface-number
mac-authentication
Set the maximum number of concurrent MAC
authentication users allowed on a port
mac-authentication max-user
user-number
Optional
256 by default
NOTE:
You cannot enable MAC authentication on a link aggregation member port. If MAC authentication is
enabled on a port, you cannot assign it to a link aggregation.
Specifying an authentication domain for MAC
authentication users
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can specify authentication domains for MAC authentication users:
• Specify a global authentication domain in system view. This domain setting applies to all ports.
• Specify an authentication domain for an individual port in interface view.
MAC authentication chooses an authentication domain for users on a port in this order: the port-specific
domain, the global domain, and the default domain. For more information about authentication
domains, see the chapter "AAA configuration."
Follow these steps to specify an authentication domain for MAC authentication users:
To do… Use the command… Remarks
Enter system view system-view —
Specify an authentication
domain for MAC
authentication users
mac-authentication domain
domain-name
Required
Use either approach
By default, no authentication
domain is specified and the system
default authentication domain is
used for MAC authentication users.
interface interface-type
interface-number
mac-authentication domain
domain-name