Displaying And Maintaining Mac Authentication; Mac Authentication Configuration Examples; Local Mac Authentication Configuration Example - HP 3600 v2 Series Security Configuration Manual

Table 8 Relationships of the MAC authentication guest VLAN with other security features
Feature
Quiet function of MAC
authentication
Super VLAN
Port intrusion protection
802.1X guest VLAN on a
port that performs
MAC-based access
control

Displaying and maintaining MAC authentication

To do...
Display MAC authentication
information
Clear MAC authentication statistics

MAC authentication configuration examples

Local MAC authentication configuration example

Network requirements
In the network in
access. Make sure that:
All users belong to domain aabbcc.net.
•
Local users use their MAC address as the username and password for MAC authentication. The
•
MAC addresses are hyphen separated and in lower case.
The access device detects whether a user has gone offline every 180 seconds. When a user fails
•
authentication, the device does not authenticate the user within 180 seconds.
Relationship description
The MAC authentication guest VLAN
function has higher priority. A user can
access any resources in the guest VLAN.
You cannot specify a VLAN as both a super
VLAN and a MAC authentication guest
VLAN.
The MAC authentication guest VLAN
function has higher priority than the block
MAC action but lower priority than the shut
down port action of the port intrusion
protection feature.
The MAC authentication guest VLAN has a
lower priority.
Use the command...
display mac-authentication
[ interface interface-list ] [ | { begin
| exclude | include }
regular-expression ]
reset mac-authentication statistics
[ interface interface-list ]
Figure 48, perform local MAC authentication on port Ethernet 1/0/1 to control Internet
116
Reference
See "MAC authentication
See the chapter "Super VLAN
configuration" in Layer 2
Switching Configuration Guide
See the chapter "Port security
configuration"
See the chapter "802.1X
configuration"
Remarks
Available in any view
Available in user view
timers"
LAN
—