S1700 Managed Series Ethernet Switches 
Web User Manual 
Huawei Proprietary and Confidential           
Copyright © Huawei Technologies Co., Ltd. 
 
9.6 MAC-based Access Control 
Some devices connected to network do not support 802.1X authentication possibly due to the 
limitation of hardware and software, such as network printer, IP phone, and some wireless 
APs. The switch allows this kind of network device to achieve authentication access by 
authenticating the MAC address of the device. 
9.6.1 Global 
Click Security> MAC-based Aceess Control> Global to configure the global parameters of 
MAC Authentication, the configuration page is displayed as follows. 
Figure 9-25 Global Settings 
 
 
Table 9-18 Parameters of Global Settings 
Configure the global function of MAC address authentication. 
Configure the password used to authenticate MAC address, ranging from 1 to 
16 characters. 
Configure  the  user  name  used  to  configure  MAC  address  authentication, 
using MAC address as user name is default, ranging from 1 to 64 characters. 
When the number of access user reaches the configured limitation number, 
the device will not  execute authentication  and trigger action for  the  later 
accessed user, thus those users can not normally access the network. The 
value ranges from 1 to 512, and the default is 256. 
 
 
After configuring the user name (use the MAC address as user name by default ) and 
password for MAC address authentication, you must create an account in Security> User 
Management. To complete the MAC address authentication, the user name and password 
should be the same as user name and password for MAC address authentication .