Mac Address Authentication Enhanced Function Configuration; Mac Address Authentication Enhanced Function Configuration Task List; Configuring A Guest Vlan - H3C S5100-SI Operation Manual

MAC Address Authentication Enhanced Function Configuration

MAC Address Authentication Enhanced Function Configuration Task List

Complete the following tasks to configure MAC address authentication enhanced function:

Configuring a Guest VLAN

Configuring the Maximum Number of MAC Address Authentication Users
Allowed to Access a Port
Configuring a Guest VLAN
Different from Guest VLANs described in the 802.1x and System-Guard manual, Guest VLANs
mentioned in this section refer to Guests VLANs dedicated to MAC address authentication.
After completing configuration tasks in
switch, this switch can authenticate access users according to their MAC addresses or according to
fixed user names and passwords. The switch will not learn MAC addresses of the clients failing in the
authentication into its local MAC address table, thus prevent illegal users from accessing the network.
In some cases, if the clients failing in the authentication are required to access some restricted
resources in the network (such as the virus library update server), you can use the Guest VLAN.
You can configure a Guest VLAN for each port of the switch. When a client connected to a port fails in
MAC address authentication, this port will be added into the Guest VLAN automatically. The MAC
address of this client will also be learned into the MAC address table of the Guest VLAN, and thus the
user can access the network resources of the Guest VLAN.
Task
Configuring Basic MAC Address Authentication Functions
1-4
Remarks
Optional
Optional
for a