406
C
21: 802.1
HAPTER
Centralized MAC
Address Authentication
Configuration
Enabling MAC Address
Authentication Both
Globally and On the Port
Configuring Centralized
MAC Address
Authentication Mode
C
X
ONFIGURATION
Centralized MAC address authentication configuration includes:
Enabling MAC address authentication both globally and on the port
■
Configuring domain name used by the MAC address authentication user
■
Configuring centralized MAC address authentication timers
■
CAUTION: Note the following two items in local authentication:
The MAC address which is used as local user name and password must be in the
■
"HHH" format and exclude hyphens.
The service type of local user must be set to lan-access.
■
You can use the following commands to enable/disable the centralized MAC address
authentication on the specified port; if you do not specify the port, the feature is
enabled globally.
Perform the following configuration in System View or Ethernet Port View.
Table 430 Enabling/Disabling Centralized MAC Address Authentication
Operation
Enable centralized MAC address
authentication
Disable centralized MAC address
authentication
You can configure the centralized MAC address authentication status on the ports
first. However, the configuration does not function on each port until the feature has
been enabled globally.
Centralized MAC address authentication and 802.1x cannot be used on the same
port together.
By default, the centralized MAC address authentication feature is disabled both on
each port and globally.
Table 431 lists the operations to configure centralized MAC address authentication
mode.
Table 431 Configure centralized MAC address authentication mode
Operation
Enter system view
Configure centralized
MAC address
authentication mode
Command
mac-authentication [ interface interface_list
]
undo mac-authentication [ interface
interface_list ]
Command
system-view
mac-authentication
authmode {
usernameasmacaddress |
usernamefixed }
Description
Optional
By default, the authentication mode is
MAC address mode.