Checking The Configuration; Maintaining Nac - Huawei Quidway S9300 Configuration Manual

2 NAC Configuration
Context
If re-authentication of a user with the specific MAC address is enabled, the online user is re-
authenticated periodically. If a user passes the authentication, the user needs to be re-authorized;
otherwise, the user goes offline.
You can run the mac-authen timer command to set the interval of re-authentication. For details,
see
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
mac-authen reauthenticate mac-address mac-address
A specified user that passes MAC address authentication is re-authenticated.
If the user does not pass the MAC authentication, the user is not authenticated again.
----End

2.5.11 Checking the Configuration

Prerequisite
The configurations of MAC address authentication are complete.
Procedure
l
----End
Example
View information about MAC address authentication on GE 1/0/1.
<Quidway> display mac-authen interface gigabitethernet 1/0/1
GigabitEthernet1/0/1 current state : UP
MAC address authentication is Enabled
Max online user is 8192
Current online user is 1
Guest VLAN is disabled
Authentication Success: 1, Failure: 0
Index
16400
Controlled User(s) amount to 1

2.6 Maintaining NAC

This section describes how to clear statistics about NAC and debug NAC.
2-30
2.5.7 (Optional) Setting the Timers of MAC Address
Run the display mac-authen [ interface { interface-type interface-number1 [ to interface-
number2 ] } &<1-10> ] command to view the configuration of MAC address authentication.
MAC/VLAN
00e0-fc33-0011/15
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
UserOnlineTime
2009-05-18 09:21:55
Configuration Guide - Security
Authentication.
Issue 06 (2010–01–08)