HP 3600 v2 Series Command Reference Manual page 141

The cipher option specifies an encrypted password, which is saved in cipher text. You can input 1
•
to 63 characters in plain text, or 24 or 88 characters in cipher text, for the password. If you input
no more than 16 characters in plain text, the string is encrypted into a 24-character password. If you
input 16 to 63 characters in plain text, the string is encrypted into an 88-character password. The
system treats a 24-character password as a cipher text password, if it can decrypt the password. If
not, the system treats the password as a plain text password.
The simple option specifies a plain text password. You can type a password of 1 to 63 characters
•
only in plain text. The password is saved in plain text.
mac-address: Uses MAC-based user accounts for MAC authentication users. If this option is specified,
you must create one user account for each user, and use the MAC address of the user as both the
username and password for the account. You can also specify the format of username and password:
with-hyphen—Hyphenates the MAC address, for example xx-xx-xx-xx-xx-xx.
•
without-hyphen—Excludes hyphens from the MAC address, for example, xxxxxxxxxxxx.
•
lowercase—Inputs letters in lower case.
•
uppercase—Capitalizes letters.
•
Description
Use the mac-authentication user-name-format command to configure the type of user accounts for MAC
authentication users.
Use the undo mac-authentication user-name-format command to restore the default.
By default, each user's MAC address is used as the username and password for MAC authentication,
and letters must be input in lower case without hyphens.
MAC authentication supports the following types of user account:
One MAC-based user account for each user. A user can pass MAC authentication only when its
•
MAC address matches a MAC-based user account. This approach is suitable for an insecure
environment.
One shared user account for all users. Any user can pass MAC authentication on any MAC
•
authentication enabled port. You can use this approach in a secure environment to limit network
resources accessible to MAC authentication users, for example, by assigning an authorized ACL or
VLAN for the shared account.
Related commands: display mac-authentication.
Examples
# Configure a shared account for MAC authentication users: set the username as abc and password as
xyz, and display the password in plain text.
<Sysname> system-view
[Sysname] mac-authentication user-name-format fixed account abc password simple xyz
[Sysname] display this
#
mac-authentication user-name-format fixed account abc password simple xyz
#
# Configure a shared account for MAC authentication users: set the username as abc and password as
xyz, and display the password in cipher text.
<Sysname> system-view
[Sysname] mac-authentication user-name-format fixed account abc password cipher xyz
[Sysname] display this
131