Centralized Mac Address Authentication Configuration Example - Huawei Quidway S5600 Series Operation Manual

Operation Manual -- Centralized MAC Address Authentication
Quidway S5600 Series Ethernet Switches-Release 1510
Operation
Clear the statistics
of global or port
centralized
address
authentication
1.4 Centralized MAC Address Authentication Configuration
Example
Note:
Centralized MAC address authentication configuration is similar to that of 802.1x. In
this example, the differences between the two lie in:
Centralized MAC address authentication needs to be enabled both globally and for
port.
In MAC address mode, MAC address of locally authenticated user is used as both
user name and password.
In MAC address mode, MAC address of user authenticated by RADIUS server need
to be configured as both user name and password on the RADIUS server.
The following section describes how to enable centralized MAC address authentication
globally and for a port, and how to configure a local user. For other related configuration,
refer to the configuration examples in "802.1x" Configuration.
# Enable centralized MAC address authentication for GigabitEthernet 1/0/2 port.
<Quidway> system-view
[Quidway] mac-authentication interface GigabitEthernet 1/0/2
# Configure centralized MAC address authentication mode as MAC address mode, and
use hyphened MAC addresses as the user names and passwords for authentication.
[Quidway]
with-hyphen
# Add a local user.
Configure the user name and password.
[Quidway] local-user 00-e0-fc-01-01-01
[Quidway-luser-00-e0-fc-01-01-01] password simple 00-e0-fc-01-01-01
Set service type of the local user to lan-access.
[Quidway-luser-00-e0-fc-01-01-01] service-type lan-access
# Enable centralized MAC address authentication globally.
[Quidway-luser-00-e0-fc-01-01-01] quit
Command
reset mac-authentication
statistics [ interface
MAC
interface-type
interface-number ]
mac-authentication
Huawei Technologies Proprietary
Chapter 1 Centralized MAC Address
This command is executed in
user view
authmode usernameasmacaddress
1-6
Authentication Configuration
Description
userformat