Configuring Mac Authentication Delay; Displaying And Maintaining Mac Authentication - H3C S5500-EI Series Security Configuration Manual

resources immediately after a MAC authentication is complete. As a solution, remind the MAC
authentication users to release their IP addresses or repair their network connections for a DHCP
reassignment after MAC authentication is complete.
Before you configure a MAC authentication critical VLAN on a port, complete the following tasks:
Enable MAC authentication.
•
Enable MAC-based VLAN on the port.
•
Create the VLAN to be specified as the MAC authentication critical VLAN.
•
To configure a MAC authentication critical VLAN:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
port view.
3. Specify a MAC
authentication critical
VLAN.

Configuring MAC authentication delay

When both 802.1X authentication and MAC authentication are enabled on a port, you can delay MAC
authentication, so that 802.1X authentication is preferentially triggered.
To configure MAC authentication delay:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Enable MAC authentication
delay and set the delay time.

Displaying and maintaining MAC authentication

Task
Display MAC authentication
information.
Clear MAC authentication
statistics.
Command
system-view
interface interface-type
interface-number
mac-authentication critical vlan
critical-vlan-id
Command
system-view
interface interface-type
interface-number
mac-authentication timer
auth-delay time
Command
display mac-authentication
[ interface interface-list ] [ | { begin
| exclude | include }
regular-expression ]
reset mac-authentication statistics
[ interface interface-list ]
125
Remarks
N/A
N/A
By default, no MAC authentication
critical VLAN is configured.
You can configure only one MAC
authentication critical VLAN on a
port.
Remarks
N/A
N/A
By default, MAC authentication is
not delayed.
Remarks
Available in any view
Available in user view