H3C S5830V2 Security Configuration Manual page 97

[Device] local-user 00-e0-fc-12-34-56 class network
[Device-luser-network-00-e0-fc-12-34-56] password simple 00-e0-fc-12-34-56
[Device-luser-network-00-e0-fc-12-34-56] service-type lan-access
[Device-luser-network-00-e0-fc-12-34-56] quit
# Configure ISP domain aabbcc to perform local authentication for LAN users.
[Device] domain aabbcc
[Device-isp-aabbcc] authentication lan-access local
[Device-isp-aabbcc] quit
# Enable MAC authentication globally.
[Device] mac-authentication
# Enable MAC authentication on port Ten-GigabitEthernet 1/0/1.
[Device] interface ten-gigabitethernet 1/0/1
[Device-Ten-GigabitEthernet1/0/1] mac-authentication
[Device-Ten-GigabitEthernet1/0/1] quit
# Specify the MAC authentication domain as the ISP domain aabbcc.
[Device] mac-authentication domain aabbcc
# Configure MAC authentication timers.
[Device] mac-authentication timer offline-detect 180
[Device] mac-authentication timer quiet 180
# Configure MAC authentication to use MAC-based accounts. The MAC address usernames and
passwords are hyphenated and in lower case.
[Device] mac-authentication user-name-format mac-address with-hyphen lowercase
Verifying the configuration
# Display MAC authentication settings and statistics.
<Device> display mac-authentication
MAC authentication is enabled
User name format is MAC address in lowercase, like xx-xx-xx-xx-xx-xx
Fixed username: mac
Fixed password: Not configured
Silent MAC user info:
Ten-GigabitEthernet1/0/1 is link-up
MAC authentication is enabled
Max number of online users is 256
Current number of online users is 1
Current authentication domain: Not configured
Authentication attempts: successful 1, failed 0
Offline detect period is 180s
Quiet period is 180s
Server response timeout value is 100s
Max number of users is 1024 per slot
Current number of online users is 1
Current authentication domain is aabbcc
MAC Addr VLAN ID From Port
83
Port Index