Compatibility Information; Feature And Hardware Compatibility; Command And Hardware Compatibility; Configuration Prerequisites - HP MSR Series Configuration Manual

The device reauthenticates an online MAC authentication user periodically only after it receives the
termination action Radius-request from the authentication server for this user. The Session-Timeout
attribute (session timeout period) assigned by the server is the reauthentication interval. To display
the server-assigned Session-Timeout and Termination-Action attributes, use the display
mac-authentication connection command. Support for the server configuration and assignment of
Session-Timeout and Termination-Action attributes depends on the server model.
When no server is reachable for MAC reauthentication, the device keeps the MAC authentication
users online or logs off the users, depending on the keep-online feature configuration on the device.
For information about the keep-online feature, see

Compatibility information

Feature and hardware compatibility

This feature is supported only on the following ports:
•
Layer 2 Ethernet ports on the following modules:
HMIM-8GSW.
HMIM-24GSW.
HMIM-24GSWP
SIC-4GSW.
SIC-4GSWP.
•
Fixed Layer 2 Ethernet ports on the following routers:
MSR954(JH296A/JH297A/JH299A).
MSR1002-4/1003-8S.
MSR2004-24/2004-48.

Command and hardware compatibility

Commands and descriptions for centralized devices apply to the following routers:
•
MSR1002-4/1003-8S.
•
MSR2003.
•
MSR2004-24/2004-48.
•
MSR3012/3024/3044/3064.
•
MSR954(JH296A/JH297A/JH299A)
Commands and descriptions for distributed devices apply to MSR4060 and MSR4080 routers.

Configuration prerequisites

Before you configure MAC authentication, complete the following tasks:
1. Configure an ISP domain and specify an AAA method. For more information, see
AAA."
For local authentication, you must also create local user accounts (including usernames
and passwords), and specify the lan-access service for local users.
For RADIUS authentication, make sure the device and the RADIUS server can reach each
other, and create user accounts on the RADIUS server. If you are using MAC-based
accounts, make sure the username and password for each account are the same as the
MAC address of each MAC authentication user.
"Configuring the keep-online
122
feature."
"Configuring