H3C S6812 Series Command Reference Manual page 1801

<Sysname> system-view
[Sysname] mac-authentication
# Enable MAC authentication on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication
Related commands
display mac-authentication
mac-authentication critical vlan
Use mac-authentication critical vlan to specify the MAC authentication critical VLAN on a port.
Use undo mac-authentication critical vlan to restore the default.
Syntax
mac-authentication critical vlan critical-vlan-id
undo mac-authentication critical vlan
Default
No MAC authentication critical VLAN exists on a port.
Views
Ethernet interface view
Predefined user roles
network-admin
Parameters
critical-vlan-id: Specifies a VLAN as the MAC authentication critical VLAN. The value range for the
VLAN ID is 1 to 4094. Make sure the VLAN has been created.
Usage guidelines
The MAC authentication critical VLAN accommodates users who fail MAC authentication because
all the servers in their ISP domains are unreachable. Users in the critical VLAN can access network
resources in the critical VLAN.
You cannot specify a VLAN as both a super VLAN and a MAC authentication critical VLAN on a port.
For more information about super VLANs, see Layer 2—LAN Switching Configuration Guide.
The critical VLAN feature takes effect when MAC authentication is performed only through RADIUS
servers. If a MAC authentication user fails local authentication after RADIUS authentication, the user
is not assigned to the critical VLAN.
Before you delete a VLAN that has been set as a MAC authentication critical VLAN, use the undo
mac-authentication critical vlan command to remove the critical VLAN configuration.
Examples
# Configure VLAN 100 as the MAC authentication critical VLAN on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication critical vlan 100
Related commands
display mac-authentication
6