Mac Authentication Configuration Examples; Example: Configuring Local Mac Authentication - H3C SR8800-F Configuration Manual

Task
Display MAC authentication information.
(In standalone mode.) Display MAC
authentication connections.
(In IRF mode.) Display MAC authentication
connections.
Clear MAC authentication statistics.
Remove users from the MAC authentication
critical VLAN on a port.
Remove users from the MAC authentication
guest VLAN on a port.

MAC authentication configuration examples

Example: Configuring local MAC authentication

Network configuration
As shown in
control Internet access of users.
Configure the device to meet the following requirements:
•
Detect whether a user has gone offline every 180 seconds.
•
Deny a user for 180 seconds if the user fails MAC authentication.
•
Authenticate all users in ISP domain bbb.
•
Use the MAC address of each user as the username and password for authentication. A MAC
address is in the hexadecimal notation with hyphens, and letters are in lower case.
Figure 69 Network diagram
Procedure
# Add a network access local user. In this example, configure both the username and password as
Host A's MAC address 00-e0-fc-12-34-56.
<Device> system-view
[Device] local-user 00-e0-fc-12-34-56 class network
[Device-luser-network-00-e0-fc-12-34-56] password simple 00-e0-fc-12-34-56
Figure 69, the device performs local MAC authentication on GigabitEthernet 1/0/1 to
Command
display mac-authentication [ interface interface-type
interface-number ]
display mac-authentication connection [ interface
interface-type interface-number | slot slot-number |
user-mac mac-address | user-name user-name ]
display mac-authentication connection [ chassis
chassis-number slot slot-number | interface
interface-type interface-number | user-mac mac-address |
user-name user-name ]
reset mac-authentication statistics [ interface
interface-type interface-number ]
reset mac-authentication critical-vlan interface
interface-type interface-number [ mac-address
mac-address ]
reset mac-authentication guest-vlan interface
interface-type interface-number [ mac-address
mac-address ]
223