Displaying And Maintaining Mac Authentication; Mac Authentication Configuration Examples; Local Mac Authentication Configuration Example - H3C S5120-EI Series Operation Manual

Different ports can be configured with different guest VLANs, but a port can be configured with only
one guest VLAN.
If you configure both the 802.1X authentication MGV and the MAC authentication MGV on a port,
only the 802.1X authentication MGV will take effect. For description on 802.1X authentication MGV,
refer to 802.1X Configuration in the Security Volume.
The priority of the MGV function is higher than that of the intrusion protection function of blocking
frames from a specified MAC address, but lower than that of the intrusion protection function of
disabling the port. For the port intrusion protection functions, refer to Port Security Configuration in
the Security Volume.
The priority of the MGV function is higher than that of the quiet MAC function of MAC
authentication.
You cannot configure both the guest VLAN function and the free IP function in EAD fast
deployment on a port. For the free IP configuration, refer to 802.1X Configuration in the Security
Volume.

Displaying and Maintaining MAC Authentication

To do...
Display the global MAC
authentication information or the
MAC authentication information
about specified ports
Clear the MAC authentication
statistics

MAC Authentication Configuration Examples

Local MAC Authentication Configuration Example

Network requirements
As illustrated in Figure
Local MAC authentication is required on every port to control user access to the Internet.
All users belong to domain aabbcc.net.
Local users use their MAC addresses as the usernames and passwords for authentication.
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
Figure 1-1 Network diagram for local MAC authentication
Use the command...
display mac-authentication
[ interface interface-list ]
reset mac-authentication
statistics [ interface interface-list ]
1-1, a supplicant is connected to the device through port GigabitEthernet 1/0/1.
1-5
Remarks
Available in any view
Available in user view