Mac Authentication Configuration Examples; Local Mac Authentication Configuration Example - HPE FlexNetwork 10500 Series Security Configuration Manual

Task
Display MAC authentication information.
(In standalone mode.) Display MAC
authentication connections.
(In IRF mode.) Display MAC authentication
connections.
Display MAC address information of MAC
authentication users in specific MAC
authentication VLANs or VSIs.
Clear MAC authentication statistics.
Remove users from the MAC authentication
critical VLAN on a port.
Remove users from the MAC authentication
critical voice VLAN on a port.
Remove users from the MAC authentication
guest VLAN on a port.
Remove users from the MAC authentication
critical VSI on a port.
Remove users from the MAC authentication
guest VSI on a port.

MAC authentication configuration examples

Local MAC authentication configuration example

Network requirements
As shown in
control Internet access of users.
Configure the device to meet the following requirements:
•
Detect whether a user has gone offline every 180 seconds.
•
Deny a user for 180 seconds if the user fails MAC authentication.
•
Authenticate all users in ISP domain bbb.
•
Use the MAC address of each user as the username and password for authentication. A MAC
address is in the hexadecimal notation with hyphens, and letters are in lower case.
Figure 47, the device performs local MAC authentication on GigabitEthernet 1/0/1 to
Command
display mac-authentication [ interface interface-type
interface-number ]
display mac-authentication connection [ open ]
[ interface interface-type interface-number | slot
slot-number | user-mac mac-address | user-name
user-name ]
display mac-authentication connection [ open ]
[ chassis chassis-number slot slot-number | interface
interface-type interface-number | user-mac mac-address |
user-name user-name ]
display mac-authentication mac-address
{ critical-vlan | critical-vsi | guest-vlan | guest-vsi }
[ interface interface-type interface-number ]
reset mac-authentication statistics [ interface
interface-type interface-number ]
reset mac-authentication critical-vlan interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication critical-voice-vlan interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication guest-vlan interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication critical vsi interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication guest-vsi interface
interface-type interface-number [ mac-address
mac-address ]
157