Displaying and maintaining MAC authentication
Execute display commands in any view and reset commands in user view.
Task
Display MAC authentication information.
Display MAC authentication connections
(centralized devices in standalone mode).
Display MAC authentication connections
(distributed devices in standalone
mode/centralized devices in IRF mode).
Display MAC authentication connections
(distributed devices in IRF mode).
Clear MAC authentication statistics.
MAC authentication configuration examples
Local MAC authentication configuration example
Network requirements
As shown in
to control Internet access of users.
Configure the device to meet the following requirements:
•
Detect whether a user has gone offline every 180 seconds.
•
Deny a user for 180 seconds if the user fails MAC authentication.
•
Authenticate all users in ISP domain bbb.
•
Use the MAC address of each user as the username and password for authentication. A MAC
address is in the hexadecimal notation with hyphens, and letters are in lower case.
Figure 45 Network diagram
Configuration procedure
# Add a network access local user. In this example, configure both the username and password as
Host A's MAC address 00-e0-fc-12-34-56.
<Device> system-view
Figure
45, the device performs local MAC authentication on port GigabitEthernet 2/0/1
Command
display mac-authentication [ interface interface-type
interface-number ]
display mac-authentication connection [ interface
interface-type interface-number | user-mac mac-addr |
user-name user-name ]
display mac-authentication connection [ interface
interface-type interface-number | slot slot-number |
user-mac mac-addr | user-name user-name ]
display mac-authentication connection [ chassis
chassis-number slot slot-number | interface
interface-type interface-number | user-mac mac-addr |
user-name user-name ]
reset mac-authentication statistics [ interface
interface-type interface-number ]
127