301
5. In the Ports With MAC Authentication Enabled area, click Add.
The MAC Authentication page appears.
6. Select GigabitEthernet1/0/1 from the Port list, and click Apply.
Figure 288 Enabling MAC authentication for port GigabitEthernet 1/0/1
ACL assignment configuration example
Network requirements
As shown in Figure 289, a host connects to port GigabitEthernet 1/0/1 on the switch and the switch uses
RADIUS servers to perform authentication, authorization, and accounting.
Perform MAC authentication on port GigabitEthernet 1/0/1 to control Internet access. Make sure an
authenticated user can access the Internet but not the FTP server at 10.0.0.1.
Use MAC-based user accounts for MAC authentication users. The MAC addresses are not hyphenated.
Figure 289 Network diagram
Configuration prerequisites
Make sure the RADIUS server and the switch can reach each other.
On the RADIUS server, add a user account with the host MAC address unhyphenated as both the
username and password, and specify ACL 3000 as the authorization ACL for the user account.
Configuring a RADIUS scheme
1. From the navigation tree, select Authentication > RADIUS.
The RADIUS Server tab appears.
To Next Page
Loading...
