Configuration Procedure - HP 12500 Series Configuration Manual

For local authentication, create local user accounts, and specify the lan-access service for the
•
accounts.
For RADIUS authentication, check that the device and the RADIUS server can reach each other, and
•
create user accounts on the RADIUS server.
NOTE:
If you are using MAC-based accounts, make sure that the username and password for each account is the
same as the MAC address of the MAC authentication users.

Configuration procedure

MAC authentication can take effect on a port only when it is enabled globally and on the port.
Configuring MAC authentication globally
Step
1. Enter system view.
2. Enable MAC
authentication globally.
3. Configure MAC
authentication timers.
4. Configure the properties
of MAC authentication
user accounts.
Configuring MAC authentication on a port
Step
1. Enter system view.
2. Enable MAC authentication.
Command
system-view
mac-authentication
mac-authentication timer
{ offline-detect offline-detect-value |
quiet quiet-value | server-timeout
server-timeout-value }
mac-authentication user-name-format
{ fixed [ account name ] [ password
{ cipher | simple } password ] |
mac-address [ { with-hyphen |
without-hyphen } [ lowercase |
uppercase ] ] }
Command
system-view
•
Approach 1:
mac-authentication interface
interface-list
•
Approach 2:
a. interface interface-type
interface-number
b. mac-authentication
97
Remarks
N/A
Disabled by default.
Optional.
By default, the offline detect timer is
300 seconds, the quiet timer is 60
seconds, and the server timeout
timer is 100 seconds.
Optional.
By default, the username and
password for a MAC
authentication user account must
be a MAC address in lower case
without hyphens.
Remarks
N/A
Use either approach.
Disabled by default.
Enable MAC authentication for
ports in bulk in system view or an
individual port in interface view.