115
1. Enter system view.
system-view
N/A
2. Enter
interface view.
interface
interface-type
interface-number
N/A
3.
Enable MAC authentication
offline detection.
mac-authentication
By default, MAC authentication
offline detection is enabled.
Displaying and maintaining MAC authentication
reset mac-authentication critical-voice-vlan interface interface-type interface-number
[ mac-address mac-address ] command is available in Release 1121 and later.
Execute display commands in any view and reset commands in user view.
Display MAC authentication information.
display mac-authentication
[
interface
interface-type
interface-number ]
Display MAC authentication connections.
display mac-authentication connection
[
interface
interface-type interface-number |
slot
slot-number |
mac-addr |
user-name ]
Clear MAC authentication statistics.
reset mac-authentication statistics
[
interface
interface-type interface-number ]
Remove users from the MAC authentication
critical VLAN on a port.
reset mac-authentication critical-vlan interface
interface-type interface-number [
mac-address
mac-address ]
Remove users from the MAC authentication
critical voice VLAN on a port.
reset mac-authentication critical-voice-vlan
interface
interface-type interface-number [
mac-address
mac-address ]
Remove users from the MAC authentication
guest VLAN on a port.
reset mac-authentication guest-vlan interface
interface-type interface-number [
mac-address
mac-address ]
MAC authentication configuration examples
Local MAC authentication configuration example
Network requirements
As shown in Figure 35, the device performs local MAC authentication on GigabitEthernet 1/0/1 to
control Internet access of users.
Configure the device to meet the following requirements:
• Detect whether a user has gone offline every 180 seconds.
• Deny a user for 180 seconds if the user fails MAC authentication.
• Authenticate all users in ISP domain bbb.
To Next Page
Loading...
Need help?
General