Task
Clear MAC authentication
statistics.
MAC authentication configuration examples
IMPORTANT:
By default, Ethernet interfaces, VLAN interfaces, and aggregate interfaces are in DOWN state. To
configure such an interface, first use the undo shutdown command to bring the interface up.
Local MAC authentication configuration example
Network requirements
In the network in
Internet access. Make sure that:
All users belong to domain aabbcc.net.
•
Local users use their MAC address as the username and password for MAC authentication. The
•
MAC addresses are hyphen separated and in lower case.
The access device detects whether a user has gone offline every 180 seconds. When a user fails
•
authentication, the device does not authenticate the user within 180 seconds.
Figure 33 Network diagram
Configuration procedure
# Add a local user account, set both the username and password to 00-e0-fc- 1 2-34-56, the MAC address
of the user host, and enable LAN access service for the account.
<Device> system-view
[Device] local-user 00-e0-fc-12-34-56
[Device-luser-00-e0-fc-12-34-56] password simple 00-e0-fc-12-34-56
[Device-luser-00-e0-fc-12-34-56] service-type lan-access
[Device-luser-00-e0-fc-12-34-56] quit
# Configure ISP domain aabbcc.net to perform local authentication for LAN access users.
[Device] domain aabbcc.net
[Device-isp-aabbcc.net] authentication lan-access local
[Device-isp-aabbcc.net] quit
# Enable MAC authentication globally.
[Device] mac-authentication
# Enable MAC authentication on port GigabitEthernet 3/0/1.
Command
reset mac-authentication statistics
[ interface interface-list ]
Figure
33, perform local MAC authentication on port GigabitEthernet 3/0/1 to control
99
Remarks
Available in user view.