Enabling Mac Address Authentication On An Interface - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Context
Before the configuration of MAC address authentication, enable MAC address authentication
globally.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
mac-authen
MAC address authentication is enabled globally.
Running this command is equivalent to enabling global MAC address authentication. Related
configurations of MAC address authentication take effect only after MAC address authentication
is enabled.
By default, MAC address authentication is disabled globally.
----End

2.5.3 Enabling MAC Address Authentication on an Interface

Context
If MAC address authentication is enabled on an interface, 802.1x authentication cannot be
enabled on the interface. If 802.1x authentication is enabled on an interface, MAC address
authentication cannot be enabled on the interface.
You can enable MAC address authentication on an interface in the following ways.
Procedure
l
Issue 01 (2011-07-15)
CAUTION
In the system view:
1. Run:
system-view
The system view is displayed.
2. Run:
mac-authen interface { interface-type interface-number1 [ to interface-
number2 ] } &<1-10>
MAC address authentication is enabled on the interfaces.
If there are online users who log in through MAC address authentication, disabling
MAC address authentication is prohibited.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
69