H3C S3610-28P Operation Manual page 910

Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
A local user uses aaa as the username and 123456 as the password for
authentication.
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
II. Network Diagram
Figure 4-1 Network diagram for local MAC authentication
III. Configuration Procedure
1) Configure MAC authentication on the switch.
# Add a local user.
<Device> system-view
[Device] local-user aaa
[Device-luser-aaa] password simple 123456
[Device-luser-aaa] service-type lan-access
[Device-luser-aaa] quit
# Configure ISP domain aabbcc.net, and specify to perform local authentication.
[Device] domain aabbcc.net
[Device-isp-aabbcc.net] authentication lan-access local
[Device-isp-aabbcc.net] quit
# Enable MAC authentication globally.
[Device] mac-authentication
# Enable MAC authentication for port Ethernet 1/0/1.
[Device] mac-authentication interface ethernet 1/0/1
# Specify the ISP domain for MAC authentication.
[Device] mac-authentication domain aabbcc.net
# Set the MAC authentication timers.
[Device] mac-authentication timer offline-detect 180
[Device] mac-authentication timer quiet 3
[Device] mac-authentication user-name-format fixed account aaa password
simple 123456
2) Verify the configuration
# Display global MAC authentication information.
<Device> display mac-authentication
MAC address authentication is Enabled.
Chapter 4 MAC Authentication Configuration
4-6