Prerequisites; Procedure; Configuring The Keep-Online Feature - H3C SR8800-F Configuration Manual

Prerequisites

Before you configure the MAC authentication critical VLAN on a port, complete the following tasks:
•
Create the VLAN to be specified as the MAC authentication critical VLAN.
•
Configure the port as a hybrid port, and configure the VLAN as an untagged member on the
port.
For information about VLAN configuration, see Layer 2—LAN Switching Configuration Guide.

Procedure

To configure the MAC authentication critical VLAN on a port:
Step
1. Enter system view.
2. Enter Ethernet interface
view.
3. Specify the MAC
authentication critical
VLAN on the port.

Configuring the keep-online feature

By default, the device logs off online MAC authentication users if no server is reachable for MAC
reauthentication. The keep-online feature keeps authenticated MAC authentication users online
when no server is reachable for MAC reauthentication.
In a fast-recovery network, you can use the keep-online feature to prevent MAC authentication users
from coming online and going offline frequently.
To configure the keep-online feature:
Step
1. Enter system view.
2. Enter Ethernet interface view.
3. Enable the keep-online feature
for authenticated MAC
authentication users on the
port.
Command
system-view
interface interface-type
interface-number
mac-authentication critical vlan
critical-vlan-id
Command
system-view
interface interface-type
interface-number
mac-authentication
re-authenticate
server-unreachable keep-online
221
Remarks
N/A
N/A
By default, no MAC authentication
critical VLAN exists.
You can configure only one MAC
authentication critical VLAN on a
port.
Remarks
N/A
N/A
By default, the keep-online
feature is disabled.
This command takes effect only
when the authentication server
assigns reauthentication
attributes to the device.