1806
C
95: MAC A
HAPTER
Displaying and
Maintaining MAC
Authentication
MAC Authentication
Configuration
Examples
Local MAC
Authentication Example
C
UTHENTICATION
ONFIGURATION
To do...
Display the global MAC
authentication information or
the MAC authentication
information about specified
ports
Clear the MAC authentication
statistics
n
When packets with the same source MAC address are sent to two MAC
authentication-enabled ports for MAC authentication simultaneously, there may
be a case where MAC authentication succeeds on the two ports in a period of
time. During this period, however, only one of them adds the MAC address
successfully; the other fails and will go offline later.
Network requirements
As illustrated in
GigabitEthernet 1/1.
Local MAC authentication is required on every port to control user access to
■
the Internet.
All users belong to domain aabbcc.net.
■
A local user uses aaa as the username and 123456 as the password for
■
authentication.
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
■
Network diagram
Figure 524 Network diagram for MAC authentication
Supplicant
GE 1 / 1
Host
Configuration procedure
1 Enable MAC authentication on the device
# Add a local user.
<Device> system-view
[Device] local-user aaa
[Device-luser-aaa] password simple 123456
[Device-luser-aaa] service-type lan-access
[Device-luser-aaa] quit
Use the command...
display mac-authentication
[ interface interface-list ]
reset mac-authentication statistics
[ interface interface-list ]
Figure
524, a supplicant is connected to the device through port
Authenticator
Device
IP network
Remarks
Available in any
view
Available in user
view
Need help?
Do you have a question about the MSR 50 Series and is the answer not in the manual?
Questions and answers