Configuration task list
Tasks at a glance
(Required.)
(Optional.)
Specifying a MAC authentication domain
(Optional.)
Configuring the user account format
(Optional.)
Setting MAC authentication timers
(Optional.)
Enabling MAC authentication offline detection
(Optional.)
Setting the maximum number of concurrent MAC authentication users on a port
(Optional.)
Enabling MAC authentication multi-VLAN mode on a port
(Optional.)
Configuring MAC authentication delay
(Optional.)
Configuring a MAC authentication guest VLAN
(Optional.)
Configuring a MAC authentication critical VLAN
(Optional.)
Enabling the MAC authentication critical voice VLAN
(Optional.)
Configuring the keep-online feature
(Optional.)
Including user IP addresses in MAC authentication requests
(Optional.)
Enabling parallel processing of MAC authentication and 802.1X authentication
Enabling MAC authentication
Step
1.
Enter system view.
2.
Enable MAC authentication
globally.
3.
Enter Layer 2 Ethernet
interface view.
4.
Enable MAC authentication on
the port.
Specifying a MAC authentication domain
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can use one of the following methods to specify
authentication domains for MAC authentication users:
•
Specify a global authentication domain in system view. This domain setting applies to all ports
enabled with MAC authentication.
•
Specify an authentication domain for an individual port in Layer 2 Ethernet interface view.
Enabling MAC authentication
Command
system-view
mac-authentication
interface interface-type
interface-number
mac-authentication
118
Remarks
N/A
By default, MAC authentication
is disabled globally.
N/A
By default, MAC authentication
is disabled on a port.