Configuring A Mac Authentication Critical Vlan; Configuration Prerequisites; Configuration Procedure; Displaying And Maintaining Mac Authentication - HP 5120 SI Series Security Configuration Manual

Configuring a MAC authentication critical VLAN

Configuration prerequisites

Before you configure a MAC authentication critical VLAN on a port, complete the following tasks:
Enable MAC authentication.
•
• Enable MAC-based VLAN on the port.
Create the VLAN to be specified as the MAC authentication critical VLAN.
•

Configuration procedure

Follow these steps to configure a MAC authentication critical VLAN:
To do...
Enter system view.
Enter Layer 2 Ethernet
interface view.
Configure a MAC
authentication critical VLAN.
When the MAC authentication critical VLAN function and MAC authentication quiet function are
configured on a port, the critical VLAN function has a higher priority. When a user fails MAC
authentication because no RADIUS authentication server is reachable, the user can access the resources
in the critical VLAN, and the user's MAC address is not marked as a silent MAC address. For more
information about MAC authentication quiet function, see

Displaying and maintaining MAC authentication

To do...
Display the MAC authentication
related information
Clear the MAC authentication
statistics
Use the command...
system-view
interface interface-type
interface-number
mac-authentication critical vlan
critical-vlan-id
Use the command...
display mac-authentication
[ interface interface-list ] [ | { begin
| exclude | include }
regular-expression ]
reset mac-authentication statistics
[ interface interface-list ]
101
Remarks
—
—
Required
By default, no MAC authentication
critical VLAN is configured.
You can configure only one MAC
authentication critical VLAN on a
port.
MAC authentication timers.
Remarks
Available in any view
Available in user view