Mac-Authentication Domain - HPE FlexNetwork HSR6800 Security Command Reference

and the end port number must be greater than the start port number. A port range defined without the
to interface-type interface-number portion comprises only one port.
Usage guidelines
To use MAC authentication on a port, you must enable the function both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
Mac-auth is enabled globally.
# Enable MAC authentication on port GigabitEthernet 3/0/1.
<Sysname> system-view
[Sysname] mac-authentication interface gigabitethernet 3/0/1
Mac-auth is enabled on port GigabitEthernet3/0/1.
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] mac-authentication
Mac-auth is enabled on port GigabitEthernet3/0/1.

mac-authentication domain

Use mac-authentication domain to specify a global authentication domain in system view or a port
specific authentication domain in interface view for MAC authentication users.
Use undo mac-authentication domain to restore the default.
Syntax
mac-authentication domain domain-name
undo mac-authentication domain
Default
The default authentication domain is used for MAC authentication users. For more information about
the default authentication domain, see the domain default enable command in "AAA configuration
commands."
Views
System view, interface view
Default command level
2: System level
Parameters
domain-name: Specifies an authentication domain name, a case-insensitive string of 1 to 24
characters. The domain name cannot contain any forward slash (/), colon (:), asterisk (*), question
mark (?), less-than sign (<), greater-than sign (>), or at sign (@).
Usage guidelines
The global authentication domain is applicable to all MAC authentication enabled ports. A port
specific authentication domain is applicable only to the port. You can specify different authentication
domains on different ports.
A port chooses an authentication domain for MAC authentication users in this order: port specific
domain, global domain, and the default authentication domain.
135