Mac Address Authentication Configuration; Mac Address Authentication Overview; Performing Mac Address Authentication On A Radius Server; Performing Mac Address Authentication Locally - H3C S5100-SI Operation Manual

1

MAC Address Authentication Configuration

When configuring MAC address authentication, go to these sections for information you are interested:

MAC Address Authentication Overview

Related Concepts
Configuring Basic MAC Address Authentication Functions
MAC Address Authentication Enhanced Function Configuration
Displaying and Maintaining MAC Address Authentication Configuration
MAC Address Authentication Configuration Examples
MAC Address Authentication Overview
MAC address authentication provides a way for authenticating users based on ports and MAC
addresses, without requiring any client software to be installed on the hosts. Once detecting a new MAC
address, it initiates the authentication process. During authentication, the user does not need to enter
username or password manually.
For S5100-SI/EI Series Ethernet switches, MAC address authentication can be implemented locally or
on a RADIUS server.
After determining the authentication method, users can select one of the following types of user name
as required:
MAC address mode, where the MAC address of a user serves as the user name for authentication.
Fixed mode, where user names and passwords are configured on a switch in advance. In this case,
the user name, the password, and the limits on the total number of user names are the matching
criterion for successful authentication. For details, refer to AAA of this manual for information about
local user attributes.

Performing MAC Address Authentication on a RADIUS Server

When authentications are performed on a RADIUS server, the switch serves as a RADIUS client and
completes MAC address authentication in combination of the RADIUS server.
In MAC address mode, the switch sends the MAC addresses detected to the RADIUS server as
both the user names and passwords, or sends the MAC addresses detected to the RADIUS server
as the user names and uses the configured fixed password as the password.
In fixed mode, the switch sends the user name and password previously configured for the user to
the RADIUS server for authentication.
A user can access a network upon passing the authentication performed by the RADIUS server.

Performing MAC Address Authentication Locally

When authentications are performed locally, users are authenticated by switches. In this case,
In MAC address mode, the local user name to be configured is the MAC address of an access user,
while the password may be the MAC address of the user or the fixed password configured (which is
1-1