Configuring Mac Address Authentication; Establishing The Configuration Task; Enabling Global Mac Address Authentication - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 64
View information about the MAC address added to the guest VLAN.
<Quidway> display mac-address guest
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address
-------------------------------------------------------------------------------
0000-0000-0404 3010
0000-0000-0407 3010
0000-0000-0410 3010
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 67

2.5 Configuring MAC Address Authentication

This section describes how to configure the MAC address authentication function.

2.5.1 Establishing the Configuration Task

Applicable Environment
MAC address authentication can be configured to authenticate terminals on which client
software cannot be installed, such as faxes and printers.
Pre-configuration Tasks
MAC address authentication is only an implementation scheme to authenticate the user identity.
To complete the user identity authentication, you need to select the RADIUS or local
authentication method. Before configuring MAC address authentication, complete the following
tasks:
l
l
l
Data Preparation
To configure MAC address authentication, you need the following data.
No.
1

2.5.2 Enabling Global MAC Address Authentication

Issue 01 (2011-07-15)
VLAN/
VSI/SI
Configuring the ISP authentication domain and AAA schemes, that is, RADIUS or local
authentication schemes, for the 802.1x user.
Configuring the user name and password on the RADIUS server if RADIUS authentication
is used.
Adding the user name and password manually on the S3700 if local authentication is used.
Data
Number of the interface on which MAC address authentication is enabled
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
PEVLAN CEVLAN Port
- - GE0/0/1
- - GE0/0/1
- - GE0/0/1
2 NAC Configuration
Type LSP/LSR-ID
MAC-Tunnel
guest -
guest -
guest -
68