Mac Authentication Configuration Examples; Local Mac Authentication Configuration Example - HP FlexNetwork NJ5000 User Manual

Item

MAC authentication configuration examples

Local MAC authentication configuration example

Network requirements
As shown in
Internet access, as follows:
•
Configure all users to belong to the domain aabbcc.net, and specify local authentication for
users in the domain.
•
Use the MAC address of each user as the username and password for authentication, and
require that the MAC addresses is hyphenated and in lower case.
•
Configure the access device to detect whether a user has gone offline every 180 seconds.
When a user fails authentication, the device does not authenticate the user within 180 seconds.
Figure 373 Network diagram
Configuring a local user
# Add a local user. Set the username and password as 00-e0-fc-12-34-56, the MAC address of the
user. Set the service type to LAN access. (Details not shown.)
Configuring AAA
From the navigation tree, select Authentication > AAA.
1.
On the Domain Setup page, enter the domain name aabbcc.net and click Apply.
2.
Figure 373, configure local MAC authentication on port GigabitEthernet 1/0/1 to control
Description
the 802.1X guest VLAN on a port that performs MAC-based
access control. If a user fails both types of authentication, the
access port adds the user to the 802.1X guest VLAN. For more
information about 802.1X guest VLANs, see
802.1X."
•
The MAC authentication Auth-Fail VLAN function has higher
priority than the quiet function of MAC authentication.
•
The MAC authentication Auth-Fail VLAN function has higher
priority than the block MAC action, but it has lower priority than
the shutdown port action of the port intrusion protection feature.
For more information about port intrusion protection, see
"Configuring port security."
347
"Configuring