Mac Address Authentication Enhanced Function Configuration; Mac Address Authentication Enhanced Function Configuration Task List; Configuring A Guest Vlan - H3C S5100-SI Series Operation Manual

Operation Manual – MAC Address Authentication
H3C S5100-SI/EI Series Ethernet Switches
1.4 MAC Address Authentication Enhanced Function
Configuration
1.4.1 MAC Address Authentication Enhanced Function Configuration Task
List
Complete the following tasks to configure MAC address authentication enhanced
function:

Configuring a Guest VLAN

Configuring the Maximum Number of MAC Address
Authentication Users Allowed to Access a Port
1.4.2 Configuring a Guest VLAN
Note:
Different from Guest VLANs described in the 802.1x and System-Guard manual, Guest
VLANs mentioned in this section refer to Guests VLANs dedicated to MAC address
authentication.
After completing configuration tasks in
Functions
MAC addresses or according to fixed user names and passwords. The switch will not
learn MAC addresses of the clients failing in the authentication into its local MAC
address table, thus prevent illegal users from accessing the network.
In some cases, if the clients failing in the authentication are required to access some
restricted resources in the network (such as the virus library update server), you can
use the Guest VLAN.
You can configure a Guest VLAN for each port of the switch. When a client connected
to a port fails in MAC address authentication, this port will be added into the Guest
VLAN automatically. The MAC address of this client will also be learned into the MAC
address table of the Guest VLAN, and thus the user can access the network resources
of the Guest VLAN.
Task
for a switch, this switch can authenticate access users according to their
Chapter 1 MAC Address Authentication
Configuring Basic MAC Address Authentication
1-5
Configuration
Remarks
Optional
Optional