Configuring Mac Address Authentication; Establishing The Configuration Task - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
View information about the MAC address used in 802.1x authentication or MAC address
authentication.
<Quidway> display mac-address authen
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address
-------------------------------------------------------------------------------
0000-0000-0100 3000
0000-0000-0200 3000
0000-0000-0600 3000
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 64
View information about the MAC address added to the guest VLAN.
<Quidway> display mac-address guest
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address
-------------------------------------------------------------------------------
0000-0000-0404 3010
0000-0000-0407 3010
0000-0000-0410 3010
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 67

2.4 Configuring MAC Address Authentication

This section describes how to configure the MAC address authentication function.

2.4.1 Establishing the Configuration Task

Applicable Environment
MAC address authentication can be configured to authenticate terminals on which client
software cannot be installed, such as faxes and printers.
Pre-configuration Tasks
MAC address authentication is only an implementation scheme to authenticate the user identity.
To complete the user identity authentication, you need to select the RADIUS or local
authentication method. Before configuring MAC address authentication, complete the following
tasks:
l
l
l
Issue 01 (2011-07-15)
EAPOL LogOff Packets
EAPOL Response/Identity Packets : 1
EAPOL Response/Challenge Packets: 1
VLAN/
VSI/SI
VLAN/
VSI/SI
Configuring the ISP authentication domain and AAA schemes, that is, RADIUS or local
authentication schemes, for the 802.1x user.
Configuring the user name and password on the RADIUS server if RADIUS authentication
is used.
Adding the user name and password manually on the S2700 if local authentication is used.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
: 0
PEVLAN CEVLAN Port
- - GE0/0/1
- - GE0/0/1
- - GE0/0/1
PEVLAN CEVLAN Port
- - GE0/0/1
- - GE0/0/1
- - GE0/0/1
2 NAC Configuration
Type LSP/LSR-ID
MAC-Tunnel
authen -
authen -
authen -
Type LSP/LSR-ID
MAC-Tunnel
guest -
guest -
guest -
63