Centralized Mac Address Authentication Configuration Example - Huawei Quidway S3100 Series Operation Manual

Operation Manual – Centralized MAC Address Authentication
Quidway S3100 Series Ethernet Switches
to verify the effect of the configuration. Execute the reset command in user view to
clear centralized MAC address authentication statistics.
Table 1-6 Display and debug centralized MAC address authentication
Display global or port information about
centralized
authentication
Clear
authentication statistics
1.4 Centralized MAC Address Authentication Configuration
Example
Note:
Centralized MAC address authentication configuration is similar to 802.1x. In this
example, the differences between the two lie in the following:
Centralized MAC address authentication needs to be enabled both globally and for
port.
In MAC address mode, Mac address of locally authenticated user is used as both
user name and password.
In MAC address mode, MAC address of user authenticated by RADIUS server need
to be configured as both user name and password on the RADIUS server.
The following section describes how to enable centralized MAC address authentication
globally and for a port, and how to configure a local user. For other related configuration,
refer to the configuration examples in Chapter 11 802.1x Configuration.
# Enable centralized MAC address authentication for Ethernet 1/0/2 port.
<Quidway> system-view
[Quidway] mac-authentication interface Ethernet 1/0/2
# Configure centralized MAC address authentication mode as MAC address mode.
[Quidway] mac-authentication authmode usernameasmacaddress
# Add a local user.
Configure the user name and password.
[Quidway] local-user 00-e0-fc-01-01-01
[Quidway-luser-00-e0-fc-01-01-01] password simple 00-e0-fc-01-01-01
Operation
MAC
centralized MAC
Huawei Technologies Proprietary
Chapter 1 Centralized MAC Address
display mac-authentication [ interface
address
interface-list ]
reset mac-authentication
address
[ interface
interface-number ]
1-5
Authentication Configuration
Command
statistics
interface-type