Mac-Authentication Domain - HP FlexNetwork MSR Series Command Reference Manual

Usage guidelines
This command solves the IP conflict problem which might be caused by users' IP address
modification. After you configure this command, users cannot pass MAC authentication if the IP and
MAC information in the authentication requests do not match the users' IP-MAC mappings on the
IMC server.
This command takes effect only on MAC authentication users who use static IP addresses. Users
who obtain IP addresses through DHCP are not affected.
Examples
# Include user IP addresses in MAC authentication requests on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication carry user-ip
Related commands
mac-authentication

mac-authentication domain

Use mac-authentication domain to specify a global or port-specific authentication domain.
Use undo mac-authentication domain to restore the default.
Syntax
mac-authentication domain domain-name
undo mac-authentication domain
Default
The system default authentication domain is used. For more information about the default
authentication domain, see the domain default enable command in "AAA commands."
Views
System view
Ethernet interface view
Predefined user roles
network-admin
Parameters
domain-name: Specifies the name of an ISP domain, a case-insensitive string of 1 to 255 characters.
Usage guidelines
The global authentication domain applies to all MAC authentication-enabled ports. A port-specific
authentication domain applies only to the port. You can specify different authentication domains on
different ports.
A port chooses an authentication domain for MAC authentication users in the following order:
1. Authentication domain specified on the port.
2. Global authentication domain specified in system view.
3. Default authentication domain.
Examples
# Specify the ISP domain domain1 as the global MAC authentication domain.
<Sysname> system-view
197