Configuring A Mac Authentication Guest Vlan; Configuration Prerequisites; Configuration Procedure - HP A5830 Series Configuration Manual

To do...
authentication users.

Configuring a MAC authentication guest VLAN

Configuration prerequisites

Before you configure a MAC authentication guest VLAN on a port, complete the following tasks:
Enable MAC authentication.
•
Enable MAC-based VLAN on the port.
•
Create the VLAN to be specified as the MAC authentication guest VLAN.
•

Configuration procedure

To configure a MAC authentication guest VLAN:
To do...
1. Enter system view.
2. Enter Ethernet interface
view.
3. Specify a MAC
authentication guest
VLAN.
Follow the guidelines in
Table 8 Relationships of the MAC authentication guest VLAN with other security features
Feature
Quiet function of MAC
authentication
Port intrusion protection
802.1X guest VLAN on a
port that performs MAC-
based access control
Use the command...
interface interface-type interface-
number
mac-authentication domain domain-
name
Use the command...
system-view
interface interface-type interface-
number
mac-authentication guest-vlan guest-
vlan-id
Table 8 when you configure a MAC authentication guest VLAN on a port.
Relationship description
The MAC authentication guest VLAN
function has higher priority. A user can
access any resources in the guest VLAN.
The MAC authentication guest VLAN
function has higher priority than the block
MAC action but lower priority than the shut
down port action of the port intrusion
protection feature.
The MAC authentication guest VLAN has a
lower priority.
100
Remarks
Use either approach.
By default, the system default
authentication domain is used for
MAC authentication users.
Remarks
—
—
Required.
By default, no MAC authentication
guest VLAN is configured.
You can configure only one MAC
authentication guest VLAN on a
port.
Reference
See "MAC authentication
See "Configuring port security."
See "Configuring 802.1X."
timers."