Mac-Authentication Timer Auth-Delay; Mac-Authentication User-Name-Format - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

mac-authentication timer auth-delay

Use mac-authentication timer auth-delay to enable MAC authentication delay and set the delay
time.
Use undo mac-authentication timer auth-delay to restore the default.
Syntax
mac-authentication timer auth-delay time
undo mac-authentication timer auth-delay
Default
MAC authentication delay is disabled. MAC authentication starts immediately after it is triggered by a
user packet.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
time: Specifies the delay time for MAC authentication in seconds. The value range is 1 to 180.
Usage guidelines
When both 802.1X authentication and MAC authentication are enabled on a port, you can delay
MAC authentication so that 802.1X authentication is preferentially triggered. If no 802.1X
authentication is triggered or if 802.1X authentication fails within the delay period, the port continues
to process MAC authentication.
Do
not
mac-else-userlogin-secure-ext when you want to use MAC authentication delay. The delay does
not take effect on a port in either of the two modes. For more information about port security modes,
see "Port security commands."
Examples
# Enable MAC authentication delay on interface GigabitEthernet 1/0/1 and set the delay time to 10
seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-authentication timer auth-delay 10
Related commands
display mac-authentication
port-security port-mode

mac-authentication user-name-format

Use mac-authentication user-name-format to configure the type of user accounts for MAC
authentication users.
Use undo mac-authentication user-name-format to restore the default.
Syntax
mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple }
string ] | mac-address [ { with-hyphen | without-hyphen } [ lowercase | uppercase ] ] }
set
the
port
security
mode
to
202
mac-else-userlogin-secure
or

Advertisement

Table of Contents
loading

Table of Contents