Mac-Authentication - H3C MSR Series Command Reference Manual

Field
Authorization ACL ID/number
Authorization user profile
Termination action
Session timeout period
Online from
Online duration

mac-authentication

Use mac-authentication to enable MAC authentication globally or on a port.
Use undo mac-authentication to disable MAC authentication globally or on a port.
Syntax
mac-authentication
undo mac-authentication
Default
MAC authentication is not enabled globally or on any port.
Views
System view
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
To use MAC authentication on a port, you must enable the feature both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
# Enable MAC authentication on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication
Related commands
display mac-authentication
Description
ACL authorized to the user.
User profile authorized to the user.
Action attribute assigned by the server when the session timeout timer
expires.
The following server-assigned action attributes are available:
•
Default—Logs off the online authenticated user when the session
timeout timer expires.
•
Radius-request—Reauthenticates the online user when the
session timeout timer expires.
If the device performs local authentication, this field displays N/A.
Session timeout timer assigned by the server.
If the device performs local authentication, this field displays N/A.
Time from which the MAC authentication user came online.
Online duration of the MAC authentication user.
197