Mac Authentication Configuration; Mac Authentication Overview; Performing Mac Authentication On A Radius Server; Performing Mac Authentication Locally - 3Com WX3000 Series Operation Manual

1

MAC Authentication Configuration

The sample output information in this manual was created on the WX3024. The output information on
your device may vary.

MAC Authentication Overview

MAC authentication provides a way for authenticating users based on ports and MAC addresses,
without requiring any client software to be installed on the hosts. Once detecting a new MAC address, it
initiates the authentication process. During authentication, the user does not need to enter username or
password manually.
The device implements MAC authentication locally or on a RADIUS server.
After determining the authentication method, users can select one of the following types of username as
required:
MAC address mode, where the MAC address of a user serves as both the username and the
password.
Fixed mode, where usernames and passwords are configured on the device in advance. In this
case, the username, the password, and the limits on the total number of usernames are the
matching criterion for successful authentication. For details, refer to AAA of this manual for
information about local user attributes.

Performing MAC Authentication on a RADIUS Server

In RADIUS-based MAC authentication, the device serves as a RADIUS client and completes MAC
authentication in combination of the RADIUS server.
If the type of username is MAC address, the device sends a detected MAC address to the RADIUS
server as both the username and password for authentication of the user.
If the type of username is fixed username, the device sends the same username and password
previously configured on the device to the RADIUS server for authentication of each user.
A user can access a network upon passing the authentication performed by the RADIUS server.

Performing MAC Authentication Locally

In local MAC authentication, the device performs authentication for users locally and different items
need to be manually configured for users on the device according to the specified type of username:
If the username type is MAC address, a local user must be configured for each user on the device,
using the MAC address of the accessing user as the username. Hyphens must or must not be
1-1