HP MSR Series Configuration Manual page 147

[Sysname-isp-bbb] authorization default radius-scheme 2000
[Sysname-isp-bbb] accounting default radius-scheme 2000
[Sysname-isp-bbb] quit
# Specify the ISP domain for MAC authentication.
[Sysname] mac-authentication domain bbb
# Configure the device to use MAC-based user accounts. Each MAC address is in the
hexadecimal notation with hyphens, and letters are in lower case.
[Sysname] mac-authentication user-name-format mac-address with-hyphen lowercase
# Enable MAC authentication on port GigabitEthernet 2/0/1.
[Sysname] interface gigabitethernet 2/0/1
[Sysname-GigabitEthernet2/0/1] mac-authentication
[Sysname-GigabitEthernet2/0/1] quit
# Enable MAC authentication globally.
[Sysname] mac-authentication
3. Configure the RADIUS servers:
# Add a user account with 00-e0-fc-12-34-56 as both the username and password on each
RADIUS server. (Details not shown.)
# Specify ACL 3000 as the authorization ACL for the user account. (Details not shown.)
Verifying the configuration
# Verify the MAC authentication configuration.
[Sysname] display mac-authentication
Global MAC authentication parameters:
MAC authentication
User name format
Offline detect period
Quiet period
Server timeout
Authentication domain
Max MAC-auth users
Online MAC-auth users
Silent MAC users:
MAC address
GigabitEthernet2/0/1
MAC authentication
Authentication domain
Auth-delay timer
Re-auth server-unreachable : Logoff
Host mode
Max online users
Authentication attempts
Current online users
MAC address
00e0-fc12-3456
: Enabled
: MAC address in lowercase(xx-xx-xx-xx-xx-xx)
Username : mac
Password : Not configured
: 180 s
: 180 s
: 100 s
: bbb
: 1024 per slot
: 2
VLAN ID
is link-up
Auth state
Authenticated
From port
: Enabled
: Not configured
: Disabled
: Single VLAN
: 4096
: successful 1, failed 0
: 1
132
Port index