H3C SR8800-F Configuration Manual page 12

Configuring the user account format ··························································································· 217
Configuring MAC authentication timers ······················································································· 217
About MAC authentication timers ························································································ 217
Procedure ······················································································································ 217
Enabling MAC authentication offline detection ·············································································· 218
Setting the maximum number of concurrent MAC authentication users on a port ································· 218
Enabling MAC authentication multi-VLAN mode on a port ······························································· 218
Configuring MAC authentication delay ························································································ 219
Configuring a MAC authentication guest VLAN ············································································· 219
Restrictions and guidelines ································································································ 219
Prerequisites ·················································································································· 220
Procedure ······················································································································ 220
Configuring a MAC authentication critical VLAN ··········································································· 220
Restrictions and guidelines ································································································ 220
Prerequisites ·················································································································· 221
Procedure ······················································································································ 221
Configuring the keep-online feature ··························································································· 221
Including user IP addresses in MAC authentication requests ··························································· 222
About the feature of including user IP addresses in MAC authentication requests ························· 222
Restrictions and guidelines ································································································ 222
Procedure ······················································································································ 222
Display and maintenance commands for MAC authentication ·························································· 222
MAC authentication configuration examples ················································································ 223
Example: Configuring local MAC authentication ····································································· 223
Example: Configuring RADIUS-based MAC authentication ······················································· 225
Example: Configuring ACL assignment for MAC authentication ················································· 227
Configuring PPP ·········································································· 230
About PPP ··························································································································· 230
PPP protocols ················································································································· 230
PPP link establishment process ·························································································· 230
PPP authentication ·········································································································· 231
PPP for IPv4 ·················································································································· 231
PPP for IPv6 ·················································································································· 232
Protocols and standards ·········································································································· 233
PPP tasks at a glance ············································································································· 233
Configuring a VT interface ······································································································· 233
Configuring PPP authentication ································································································· 234
Configuring PAP authentication ·························································································· 234
Configuring CHAP authentication (authenticator name is configured)·········································· 235
Configuring CHAP authentication (authenticator name is not configured) ····································· 236
Configuring MS-CHAP or MS-CHAP-V2 authentication ··························································· 237
Configuring the polling feature ·································································································· 238
Enabling fast reply for keepalive packets ····················································································· 239
Configuring PPP negotiation ····································································································· 239
Configuring the PPP negotiation timeout time ········································································ 239
Configuring IP address negotiation on the client ····································································· 240
Configuring IP address negotiation on the server ··································································· 240
Enabling IP segment match ······························································································· 243
Configuring DNS server IP address negotiation on the client ···················································· 244
Configuring DNS server IP address negotiation on the server ··················································· 244
Enabling PPP accounting ········································································································ 244
Enabling logging for PPP users ································································································· 245
Configuring service tracing objects ···························································································· 245
Enabling PPP user blocking ····································································································· 246
About PPP user blocking ·································································································· 246
Procedure ······················································································································ 246
Configuring the NAS-Port-Type attribute ····················································································· 246
Suppressing adding PPP peer host routes to the local direct route table ············································ 247
Configuring the traffic accounting frequency mode for online PPP users ············································ 247
Display and maintenance commands for PPP ·············································································· 247
vii