H3C S3600 Series Operation Manual page 552

Operation Manual – Centralized MAC Address Authentication
H3C S3600 Series Ethernet Switches-Release 1510
Set a user name for fixed
mode
Set the password for fixed
mode
1.2.4 Configuring the ISP Domain for MAC Address Authentication Users
Table 1-5 lists the operations to configure the ISP domain for centralized MAC address
authentication users.
Table 1-5 Configure the ISP domain for MAC address authentication users
Enter system view
Configure the ISP domain
for
authentication users
1.2.5 Configuring the Timers Used in Centralized MAC Address
Authentication
The following timers are used in centralized MAC address authentication:
Offline detect timer, which sets the time interval for a switch to test whether a user
goes offline. Upon detecting a user is offline, a switch notifies the RADIUS server
of the user to trigger the RADIUS server to stop the accounting on the user.
Quiet timer, which sets the quiet period for a switch. After a user fails to pass the
authentication performed by a switch, the switch quiets for a specific period (the
quiet period) before it authenticates users again.
Server timeout timer. During authentication, the switch prohibits the user from
accessing the network through the corresponding port if the connection between
the switch and RADIUS server times out. In this case, the user can have it
authenticated through another port of the switch.
Table 1-6 lists the operations to configure the timers used in centralized MAC address
authentication.
Operation
mac-authentication
authusername
username
mac-authentication
authpassword password
Operation
system-view
mac-authentication
MAC address
domain isp-name
Chapter 1 Centralized MAC Address
Command
Command
1-4
Authentication Configuration
Description
Required for fixed mode
By default, the user name
is mac and no password
is needed.
Optional
Description
—
Required
By default, the "default
domain" is used as the
ISP domain.