Displaying And Maintaining Mac Authentication; Mac Authentication Configuration Examples; Local Mac Authentication Configuration Example - HPE Moonshot 45Gc Security Configuration Manual

•
Do not configure this feature together with the MAC authentication guest VLAN on a port. If both
features are configured, users in the MAC authentication guest VLAN cannot perform a new
round of authentication.
To include user IP addresses in MAC authentication requests:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Include user IP addresses in
MAC authentication requests.

Displaying and maintaining MAC authentication

Execute display commands in any view and reset commands in user view.
Task
Display MAC authentication information.
Display MAC authentication connections.
Clear MAC authentication statistics.
Remove users from the MAC authentication
critical VLAN on a port.
Remove users from the MAC authentication
critical voice VLAN on a port.
Remove users from the MAC authentication
guest VLAN on a port.

MAC authentication configuration examples

Local MAC authentication configuration example

Network requirements
As shown in
Internet access of users.
Configure the device to meet the following requirements:
•
Detect whether a user has gone offline every 180 seconds.
•
Deny a user for 180 seconds if the user fails MAC authentication.
•
Authenticate all users in ISP domain bbb.
Figure 35, the device performs local MAC authentication on FortyGigE 1/1/1 to control
Command
system-view
interface interface-type
interface-number
mac-authentication carry
user-ip
Command
display mac-authentication [ interface interface-type
interface-number ]
display mac-authentication connection [ interface
interface-type interface-number | slot slot-number |
user-mac mac-addr | user-name user-name ]
reset mac-authentication statistics [ interface
interface-type interface-number ]
reset mac-authentication critical-vlan interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication critical-voice-vlan interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication guest-vlan interface
interface-type interface-number [ mac-address
mac-address ]
115
Remarks
N/A
N/A
By default, a MAC
authentication request does not
include the user IP address.