Displaying And Debugging Centralized Mac Address Authentication; Auto Vlan; Configuration Example Of Centralized Mac Address Authentication - 3Com 5500-SI Configuration Manual

408 C 21: 802.1
HAPTER
Displaying and
Debugging Centralized
MAC Address
Authentication

Auto VLAN

Configuration Example
of Centralized MAC
Address Authentication
C
X ONFIGURATION
After the above configuration, perform the
view the centralized MAC address authentication running state and check the
configuration result. Perform the
the centralized MAC address authentication.
Table 435 Displaying and Debugging Centralized MAC Address Authentication
Operation
Display the global information of the
centralized MAC address authentication
Enable the centralized MAC address
authentication debugging switch
Disable the centralized MAC address
authentication debugging switch
Auto VLAN uses three return list attributes to dynamically assign VLAN(s) to a port as
the user logs in.
Table 436 Auto VLAN
Auto VLAN
Tunnel-Medium-type
Tunnel-Private-Group-ID
Tunnel-Type
Before the VLAN is correctly received by the Switch 5500, you need to execute the
following command on the Switch 5500 to use standard private-group-ID:
[5500-xx]private-group-id mode standard
How to enable centralized MAC address authentication both on a port and globally,
and how to configure a local user are shown as follows. For other configurations, see
"802.1x Configuration Example".
The configurations of centralized MAC address authentication is similar to 802.1x,
their differences are:
1) Enabling centralized MAC address authentication both globally and on a port.
2) User name and password of the local authentication must be configured to the
MAC address of the user.
3) User name and password on the RADIUS server must be configured to the MAC
address of the user.
The following example shows how to enabling centralized MAC address
authentication both on a port and globally, and the way of configuring local user are
shown as follows. For other configurations, see
1 Enable centralized MAC address authentication on port Ethernet 1/0/2.
[SW5500]mac-authentication interface Ethernet 1/0/2
display
command in User View, you can debug
debugging
Command
display mac-authentication [ interface
interface_list ]
debugging mac-authentication event
undo debugging mac-authentication
event
Return String
802
2
VLAN
command in any view, you can
Comment
VLAN value