Related Concepts; Mac Address Authentication Timers; Quiet Mac Address; Configuring Basic Mac Address Authentication Functions - 3Com 5500-EI PWR Install Manual

format configured
usernameformat command; otherwise, the authentication will fail.
In fixed mode, all users' MAC addresses are automatically mapped to the configured local
passwords and usernames.
The service type of a local user needs to be configured as lan-access.

Related Concepts

MAC Address Authentication Timers

The following timers function in the process of MAC address authentication:
Offline detect timer: At this interval, the switch checks to see whether an online user has gone
offline. Once detecting that a user becomes offline, the switch sends a stop-accounting notice to
the RADIUS server.
Quiet timer: Whenever a user fails MAC address authentication, the switch does not initiate any
MAC address authentication of the user during a period defined by this timer.
Server timeout timer: During authentication of a user, if the switch receives no response from the
RADIUS server in this period, it assumes that its connection to the RADIUS server has timed out
and forbids the user from accessing the network.

Quiet MAC Address

When a user fails MAC address authentication, the MAC address becomes a quiet MAC address, which
means that any packets from the MAC address will be discarded simply by the switch until the quiet
timer expires. This prevents an invalid user from being authenticated repeatedly in a short time.
If the quiet MAC is the same as the static MAC configured or an authentication-passed MAC, then the
quiet function is not effective.

Configuring Basic MAC Address Authentication Functions

Follow these steps to configure basic MAC address authentication functions:
To do...
Enter system view
Enable MAC address
authentication
globally
Enable MAC address
authentication for the
specified port(s) or
the current port
with the mac-authentication
Use the command...
system-view
mac-authentication
mac-authentication interface
In system view
interface-list
In interface interface interface-type
view interface-number
mac-authentication
1-2
authmode usernameasmacaddress
—
Required
Disabled by default
Use either method
Disabled by default
Remarks