H3C SR8800-F Configuration Manual page 240

# Specify the LAN access service for the user.
[Device-luser-network-00-e0-fc-12-34-56] service-type lan-access
[Device-luser-network-00-e0-fc-12-34-56] quit
# Configure ISP domain bbb to perform local authentication for LAN users.
[Device] domain bbb
[Device-isp-bbb] authentication lan-access local
[Device-isp-bbb] quit
# Enable MAC authentication on GigabitEthernet 1/0/1.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] mac-authentication
[Device-GigabitEthernet1/0/1] quit
# Specify ISP domain bbb as the MAC authentication domain.
[Device] mac-authentication domain bbb
# Configure MAC authentication timers.
[Device] mac-authentication timer offline-detect 180
[Device] mac-authentication timer quiet 180
# Configure MAC authentication to use MAC-based accounts. Each MAC address is in the
hexadecimal notation with hyphens, and letters are in lower case.
[Device] mac-authentication user-name-format mac-address with-hyphen lowercase
# Enable MAC authentication globally.
[Device] mac-authentication
Verifying the configuration
# Display MAC authentication settings and statistics to verify your configuration.
[Device] display mac-authentication
Global MAC authentication parameters:
MAC authentication
User name format
Offline detect period
Quiet period
Server timeout
Authentication domain
Online MAC-auth users
Silent MAC users:
GigabitEthernet1/0/1 is link-up
MAC authentication
Carry User-IP
Authentication domain
Auth-delay timer
Re-auth server-unreachable : Logoff
Guest VLAN
Guest VLAN auth-period
Critical VLAN
: Enabled
: MAC address in lowercase(xx-xx-xx-xx-xx-xx)
Username : mac
Password : Not configured
: 180 s
: 180 s
: 100 s
: bbb
: 1
MAC address VLAN ID
00e0-fc11-1111 8
From port
GE1/0/1
: Enabled
: Disabled
: Not configured
: Disabled
: Not configured
: 30 s
: Not configured
224
Port index
1