H3C S5600 Series Operation Manual page 668

Operation Manual – MAC Address Authentication
H3C S5600 Series Ethernet Switches
To do...
Set the user name
in fixed mode for
MAC address
authentication
Specify an ISP
domain for MAC
address
authentication
Configure the
MAC address
authentication
timers
Caution:
If MAC address authentication is enabled on a port, you cannot configure the
maximum number of dynamic MAC address entries for that port (through the
mac-address max-mac-count command), and vice versa.
If MAC address authentication is enabled on a port, you cannot configure port
security (through the port-security enable command) on that port, and vice versa.
You can configure MAC address authentication on a port before enabling it globally.
However, the configuration will not take effect unless MAC address authentication is
enabled globally.
Use the command...
Set the user
name in fixed
mac-authentication
mode for MAC authmode
address usernamefixed
authentication
mac-authentication
Configure the
authusername
user name
username
mac-authentication
Configure the
authpassword
password
password
mac-authentication domain isp-name
mac-authentication timer { offline-detect
offline-detect-value | quiet quiet-value |
server-timeout server-timeout-value }
1-4
Chapter 1 MAC Address Authentication
Optional
By default, the
user name is
"mac" and no
password is
configured.
Required
The default ISP
domain (default
domain) is used
by default.
Optional
The default
timeout values
are as follows:
300 seconds for
offline detect
timer;
60 seconds for
quiet timer; and
100 seconds for
server timeout
timer
Configuration
Remarks