Mac-Authentication Critical Vlan - HP 5120 SI series Command Reference Manual

port ranges. The start port and end port of a port range must be of the same type and the end port
number must be greater than the start port number. A port range defined without the to interface-type
interface-number portion comprises only one port.
Description
Use the mac-authentication command in system view to enable MAC authentication globally.
Use the mac-authentication interface interface-list in system view to enable MAC authentication on a list
of ports, or the mac-authentication command in interface view to enable MAC authentication on a port.
Use the undo mac-authentication command in system view to disable MAC authentication globally.
Use the undo mac-authentication interface interface-list in system view to disable MAC authentication on
a list of ports, or the undo mac-authentication in interface view to disable MAC authentication on a port.
By default, MAC authentication is not enabled globally or on any port.
To use MAC authentication on a port, you must enable the function both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
Mac-auth is enabled globally.
# Enable MAC authentication on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] mac-authentication interface gigabitethernet 1/0/1
Mac-auth is enabled on port GigabitEthernet1/0/1.
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication
Mac-auth is enabled on port GigabitEthernet1/0/1.

mac-authentication critical vlan

Syntax
mac-authentication critical vlan critical-vlan-id
undo mac-authentication critical vlan
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
critical-vlan-id: Specifies a VLAN ID in the range of 1 to 4094. Make sure the VLAN has been created.
Description
Use mac-authentication critical vlan to configure a MAC authentication critical VLAN on a port for MAC
authentication users that have failed authentication because all the RADIUS authentication servers in
their ISP domain are unreachable.
119