ZXR102900ESeriesCongurationGuide
zte(cfg)#showclient
MaxClients:256HistoryAccessClientsTotal:1
OnlineClients:1HistoryFailureClientsTotal:0
Flags:I-Index,Au-Authorized,P-PortId,US-UpSpeed,DS-DownSpeed,Y-yes,N-no
IUserNameAuPVlanMacAddressUSDSElapsedTime
-------------------------------------------------------------------
0liushujieY2100.19.e0.1a.97.dd000:0:0:22
4.20MACAuthenticationConguration
MACAuthenticationOverview
Oncurrentnetworks,manydevices(suchasIPphonesandprinters)donotsupport
authenticationclient.Whenconnectedtonetworks,thedevicescannotinitiateD0T1X
authentication.
MACauthenticationmeansthat,withaMACaddresssegmentconguredonadevice,
whenthedevicedetectsthataMACaddressbelongstotheaddresssegment,aswitch
agentinitiatesauthentication.Theuser'sMACaddressisusedasausernameand
password.IfaRADIUSserverreturnsamessageindicatingthattheauthentication
succeeded,thedevicecanaccessthenetwork.
ConguringMACAuthentication
TheMACauthenticationcongurationincludesthefollowingcommands:
CommandFunction
zte(cfg-nas)#aaa-controlmac-authentication{enable|disable}
EnablesordisablestheMAC
authenticationfunction.
zte(cfg-nas)#aaa-controlmac-authenticationsession<1-3>range
<HH.HH.HH.HH.HH.HH><HH.HH.HH.HH.HH.HH>
AddstherangeofMACaddressesthat
needauthenticationinunitofsession.
zte(cfg-nas)#clearmac-authenticationsession<1-3>
ClearstherangeofMACaddressesin
unitofsession.
zte(cfg-nas)#clearmac-authenticationclient
Clearsallclientswithauthenticated
MACaddresses.
zte(cfg-nas)#clearmac-authenticationclientmac<HH.HH.HH.HH.HH.HH>
ClearsaspecicMACauthentication
client.
zte(cfg-nas)#clearmac-authenticationclient{port<portlist>|vlan
<vlanlist>}
Clearsclientsonaspecicportorina
specicVLAN.
showaaamac-authentication(allcongurationmodes)
DisplaysMACauthentication
congurationinformation.
showaaamac-authenticationclient(allcongurationmodes)
DisplaysinformationofallMAC
authenticationclients.
4-74
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential