143
Usage guidelines
The global authentication domain applies to all MAC authentication-enabled ports. A port-specific
authentication domain applies only to the port. You can specify different authentication domains on
different ports.
A port chooses an authentication domain for MAC authentication users in this order:
1. Authentication domain specified on the port.
2. Global authentication domain specified in system view.
3. Default authentication domain.
Examples
# Specify domain domain1 as the global MAC authentication domain.
<Sysname> system-view
[Sysname] mac-authentication domain domain1
# Specify domain aabbcc as the MAC authentication domain on port GigabitEthernet 2/1/1.
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] mac-authentication domain aabbcc
Related commands
• display mac-authentication
• domain default enable
mac-authentication host-mode
Use mac-authentication host-mode multi-vlan to enable MAC authentication multi-VLAN mode on a
port.
Use undo mac-authentication host-mode to restore the default.
Syntax
mac-authentication host-mode multi-vlan
undo mac-authentication host-mode
Default
MAC authentication multi-VLAN mode is disabled on a port. The device forwards packets for an
authenticated user on the port only in the VLAN where the user is authenticated. If the user accesses the
port through a different VLAN, the device logs off the user and reauthenticates the user in the new VLAN.
Views
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
The MAC authentication multi-VLAN mode enables a port to forward packets for an authenticated user
in multiple VLANs without reauthentication.
This feature improves transmission of data that is vulnerable to delay and interference. The feature is
applicable to scenarios where a user will send various types of traffic in multiple VLANs.
To Next Page
Loading...
Need help?
General
