Displaying And Maintaining Mac Authentication; Mac Authentication Configuration Examples; Local Mac Authentication Configuration Example - HPE FlexNetwork 5510 HI Series Security Configuration Manual

Step
1. Enter system view.
2. Enter
interface view.
3. Enable MAC authentication
offline detection.

Displaying and maintaining MAC authentication

IMPORTANT:
The reset mac-authentication critical-voice-vlan interface interface-type interface-number
[ mac-address mac-address ] command is available in Release 1121 and later.
Execute display commands in any view and reset commands in user view.
Task
Display MAC authentication information.
Display MAC authentication connections.
Clear MAC authentication statistics.
Remove users from the MAC authentication
critical VLAN on a port.
Remove users from the MAC authentication
critical voice VLAN on a port.
Remove users from the MAC authentication
guest VLAN on a port.

MAC authentication configuration examples

Local MAC authentication configuration example

Network requirements
As shown in
control Internet access of users.
Configure the device to meet the following requirements:
•
Detect whether a user has gone offline every 180 seconds.
•
Deny a user for 180 seconds if the user fails MAC authentication.
•
Authenticate all users in ISP domain bbb.
Layer 2 Ethernet
Figure 35, the device performs local MAC authentication on GigabitEthernet 1/0/1 to
Command
system-view
interface interface-type
interface-number
mac-authentication
offline-detect enable
Command
display mac-authentication [ interface interface-type
interface-number ]
display mac-authentication connection [ interface
interface-type interface-number | slot slot-number |
user-mac mac-addr | user-name user-name ]
reset mac-authentication
interface-type interface-number ]
reset mac-authentication
interface-type
mac-address ]
reset mac-authentication critical-voice-vlan interface
interface-type
mac-address ]
reset mac-authentication
interface-type
mac-address ]
115
Remarks
N/A
N/A
By default, MAC authentication
offline detection is enabled.
statistics
critical-vlan
interface-number [
interface-number [
guest-vlan
interface-number [
[ interface
interface
mac-address
mac-address
interface
mac-address