Configuring Mac Authentication On A Port - HP FlexNetwork NJ5000 User Manual

Configure MAC authentication global settings as described in
3.
Table 121 Configuration items
Item
Enable MAC Authentication
Offline Detection Period
Quiet Time
Server Timeout Time
Authentication ISP Domain
Authentication Information
Format

Configuring MAC authentication on a port

From the navigation tree, select Authentication > MAC Authentication.
1.
In the Ports With MAC Authentication Enabled area, click Add.
2.
Figure 372 Configuring MAC authentication on a port
Configure MAC authentication for a port as described in
3.
Table 122 Configuration items
Item
Port
Enable MAC VLAN
Auth-Fail VLAN
Description
Specify whether to enable MAC authentication globally.
Set the period that the device waits for traffic from a user before it
regards the user idle.
Set the interval that the device must wait before it can perform MAC
authentication for a user that has failed MAC authentication.
Set the interval that the device waits for a response from a RADIUS
server before it regards the RADIUS server unavailable.
Specify the ISP domain for MAC authentication users.
If no ISP domain is specified, the system default authentication
domain is used for MAC authentication users.
Configure the properties of MAC authentication user accounts.
•
MAC without hyphen—Uses MAC-based accounts, and
excludes hyphens from the MAC address, for example,
xxxxxxxxxxxx.
•
MAC with hyphen—Uses MAC-based accounts, and
hyphenates the MAC address, for example, xx-xx-xx-xx-xx-xx.
•
Fixed—Uses a shared account. You must specify a username
and password for the account.
Description
Select a port on which you want to enable MAC authentication.
Specify whether to enable MAC-based VLAN on the port.
IMPORTANT:
You can enable MAC authentication only on hybrid ports.
Specify an existing VLAN as the MAC authentication Auth-Fail VLAN.
IMPORTANT:
•
The MAC authentication Auth-Fail VLAN has a lower priority than
346
Table 121, and then click Apply.
Table 122, and then click Apply.