HP 5120 SI Series User Manual

119
port ranges. The start port and end port of a port range must be of the same type and the end port
number must be greater than the start port number. A port range defined without the to interface-type
interface-number portion comprises only one port.
Description
Use the mac-authentication command in system view to enable MAC authentication globally.
Use the mac-authentication interface interface-list in system view to enable MAC authentication on a list
of ports, or the mac-authentication command in interface view to enable MAC authentication on a port.
Use the undo mac-authentication command in system view to disable MAC authentication globally.
Use the undo mac-authentication interface interface-list in system view to disable MAC authentication on
a list of ports, or the undo mac-authentication in interface view to disable MAC authentication on a port.
By default, MAC authentication is not enabled globally or on any port.
To use MAC authentication on a port, you must enable the function both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
Mac-auth is enabled globally.
# Enable MAC authentication on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] mac-authentication interface gigabitethernet 1/0/1
Mac-auth is enabled on port GigabitEthernet1/0/1.
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication
Mac-auth is enabled on port GigabitEthernet1/0/1.
mac-authentication critical vlan
Syntax
mac-authentication critical vlan critical-vlan-id
undo mac-authentication critical vlan
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
critical-vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Make sure the VLAN has been created.
Description
Use mac-authentication critical vlan to configure a MAC authentication critical VLAN on a port for MAC
authentication users that have failed authentication because all the RADIUS authentication servers in
their ISP domain are unreachable.

HP 5120 SI Series Specifications

General

Brand	HP
Model	5120 SI Series
Category	Switch
Language	English