Mac-Authentication Domain - HP 5120 SI series Command Reference Manual

Use undo mac-authentication critical vlan to restore the default.
By default, no MAC authentication critical VLAN is configured on a port.
The MAC authentication critical VLAN configuration applies to MAC authentication users that use only
RADIUS authentication servers and have failed authentication because all the servers in their ISP domain
become unavailable (inactive), for example, for the loss of network connectivity. If a MAC authentication
user fails local authentication after RADIUS authentication, the user is not assigned to the critical VLAN.
You can configure only one MAC authentication critical VLAN on a port. The MAC authentication critical
VLANs on different ports can be different.
To have the MAC authentication critical VLAN take effect on a port, complete the following tasks:
Enable MAC authentication both globally and on the port.
•
Enable MAC-based VLAN on the port.
•
To delete a VLAN that has been configured as a MAC authentication critical VLAN, you must remove the
MAC authentication critical VLAN configuration first.
Related commands: mac-authentication; mac-vlan enable (Layer 2—LAN Switching Command
Reference).
Examples
# Specify VLAN 5 as the MAC authentication critical VLAN for port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication critical vlan 5

mac-authentication domain

Syntax
mac-authentication domain domain-name
undo mac-authentication domain
View
System view, Layer 2 Ethernet interface view
Default level
2: System level
Parameters
domain-name: Specifies an authentication domain by its name. The domain name takes a case
insensitive string of 1 to 24 characters. The domain name cannot contain any forward slash (/), colon (:),
asterisk (*), question mark (?), less-than sign (<), greater-than sign (>), or at sign (@).
Description
Use the mac-authentication domain command to specify a global authentication domain in system view
or a port specific authentication domain in interface view for MAC authentication users.
Use the undo mac-authentication domain command to restore the default.
By default, the default authentication domain is used for MAC authentication users. For more information
about the default authentication domain, see the domain default enable command in the chapter "AAA
configuration commands."
120