Mac Authentication Overview; Radius-Based Mac Authentication - 3Com MSR 50 Series Configuration Manual

95
MAC Authentication
Overview
RADIUS-Based MAC
Authentication
MAC A
C
ONFIGURATION
When configuring MAC authentication, go to these sections for information you
are interested in:
"MAC Authentication Overview" on page 1803
■
"Related Concepts" on page 1804
■
"Configuring MAC Authentication" on page 1804
■
"Displaying and Maintaining MAC Authentication" on page 1806
■
"MAC Authentication Configuration Examples" on page 1806
■
n
MAC authentication is not supported on the fixed layer 2 interface of FIC-4FSW,
DFIC-9FSW and MSR 20 Series Products.
MAC authentication provides a way of authenticating users based on ports and
MAC addresses. Once detecting a new MAC address, it initiates the
authentication process. MAC authentication requires neither client software to be
installed on the hosts, nor any username or password to be provided during
authentication.
Currently, the device supports two MAC authentication modes: Remote
Authentication Dial-In User Service (RADIUS) based MAC authentication and local
MAC authentication. For detailed information about RADIUS authentication and
local authentication, refer to
Authentication/Authorization Servers" on page
MAC authentication supports two types of usernames:
MAC address, where the MAC address of a user serves as both the username
■
and password.
Fixed username, where all users use the same preconfigured username and
■
password for authentication, regardless of the MAC addresses.
In RADIUS-based MAC authentication, the device serves as a RADIUS client and
requires a RADIUS server to cooperate with it.
If the type of username is MAC address, the device forwards a detected MAC
■
address as the username and password to the RADIUS server for authentication
of the user.
UTHENTICATION
"Specifying the RADIUS
1770.