Prerequisites; Procedure; Configuring A Mac Authentication Critical Vlan; Restrictions And Guidelines - H3C SR8800-F Configuration Manual

Prerequisites

Before you configure the MAC authentication guest VLAN on a port, complete the following tasks:
•
Create the VLAN to be specified as the MAC authentication guest VLAN.
•
Configure the port as a hybrid port, and configure the VLAN as an untagged member on the
port.
For information about VLAN configuration, see Layer 2—LAN Switching Configuration Guide.

Procedure

To configure the MAC authentication guest VLAN on a port:
Step
1. Enter system view.
2. Enter Ethernet interface
view.
3. Specify the MAC
authentication guest
VLAN on the port.
4. (Optional.) Set the
authentication interval
for users in the MAC
authentication guest
VLAN.

Configuring a MAC authentication critical VLAN

Restrictions and guidelines

When you configure the MAC authentication critical VLAN on a port, follow the guidelines in
13.
Table 13 Relationships of the MAC authentication critical VLAN with other security features
Feature
Quiet feature of MAC
authentication
Super VLAN
Command
system-view
interface interface-type
interface-number
mac-authentication
guest-vlan guest-vlan-id
mac-authentication
guest-vlan auth-period
period-value
Relationship description
The MAC authentication critical VLAN feature has
higher priority.
When a user fails MAC authentication because no
RADIUS authentication server is reachable, the
user can access the resources in the critical
VLAN. The user's MAC address is not marked as
a silent MAC address.
You cannot specify a VLAN as both a super VLAN
and a MAC authentication critical VLAN.
220
Remarks
N/A
N/A
By default, no MAC authentication guest
VLAN exists.
You can configure only one MAC
authentication guest VLAN on a port.
The default setting is 30 seconds.
Reference
See "Configuring MAC
authentication
See Layer 2—LAN
Switching Configuration
Guide.
Table
timers."