H3C S6812 Series Command Reference Manual page 1800

Table 2 Command output
Field
User MAC address
Access interface
Authentication domain
Initial VLAN
Authorization untagged VLAN
Authorization tagged VLAN
Authorization ACL ID
Authorization user profile
Termination action
Session timeout period
Online from
Online duration
Total connections
mac-authentication
Use mac-authentication to enable MAC authentication globally or on a port.
Use undo mac-authentication to disable MAC authentication globally or on a port.
Syntax
mac-authentication
undo mac-authentication
Default
MAC authentication is disabled globally or on any port.
Views
System view
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
To use MAC authentication on a port, you must enable the feature both globally and on the port.
Examples
# Enable MAC authentication globally.
Description
MAC address of the user.
Interface through which the user accesses the device.
MAC authentication domain to which the user belongs.
VLAN that holds the user before MAC authentication.
Untagged VLAN authorized to the user.
Tagged VLAN authorized to the user.
ACL authorized to the user.
User profile authorized to the user.
Action attribute assigned by the server to terminate the user session:
•
Default—Logs off the online authenticated user when the session
timeout timer expires.
•
Radius-request—Reauthenticates the online user when the
session timeout timer expires.
If the device performs local authentication, this field displays N/A.
Session timeout timer assigned by the server.
If the device performs local authentication, this field displays N/A.
Time from which the MAC authentication user came online.
Online duration of the MAC authentication user.
Total number of online MAC authentication users.
5