Table of Contents
Advertisement
mac-authentication user-name-format
Use mac-authentication user-name-format to configure the type of user accounts for MAC
authentication users.
Use undo mac-authentication user-name-format to restore the default.
Syntax
mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple }
string ] | mac-address [ { with-hyphen | without-hyphen } [ lowercase | uppercase ] ] }
undo mac-authentication user-name-format
Default
Each user's MAC address is used as the username and password for MAC authentication. A MAC
address is in the hexadecimal notation without hyphens, and letters are in lower case.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
fixed: Uses a shared account for all MAC authentication users.
account name: Specifies the username for the shared account. The name is a case-sensitive string
of 1 to 55 characters, excluding the at sign (@). If you do not specify a username, the default name
mac applies.
password: Specifies the password for the shared user account.
cipher: Specifies a password in encrypted form.
simple: Specifies a password in plaintext form. For security purposes, the password specified in
plaintext form will be stored in encrypted form.
string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 63 characters. Its
encrypted form is a case-sensitive string of 1 to 117 characters.
mac-address: Uses MAC-based user accounts for MAC authentication users. You can also specify
the format of username and password by using the following keywords:
•
with-hyphen: Includes hyphens in the MAC address, for example xx-xx-xx-xx-xx-xx.
•
without-hyphen: Excludes hyphens from the MAC address, for example, xxxxxxxxxxxx.
•
lowercase: Enters letters in lower case.
•
uppercase: Enters letters in upper case.
Usage guidelines
If you specify the MAC-based user account, the device uses the MAC address of a user as the
username and password for MAC authentication of the user. This user account type ensures high
authentication security. However, you must create on the authentication server a user account for
each user, using the MAC address of the user as both the username and password.
If you specify a shared user account, the device uses the specified username and password for MAC
authentication of all users. Because all MAC authentication users use a single account for
authentication, you only need to create one account on the authentication server. This user account
type is suitable for trusted networks.
227
Advertisement
Table of Contents
