H3C S7500E Series Operation Manual page 834

Operation Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches
A local user uses aaa as the username and 123456 as the password for
authentication.
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
II. Network Diagram
Figure 3-1 Network diagram for local MAC authentication
III. Configuration Procedure
1) Configure MAC authentication on the switch.
# Add a local user.
<Sysname> system-view
[Sysname] local-user aaa
[Sysname-luser-aaa] password simple 123456
[Sysname-luser-aaa] service-type lan-access
[Sysname-luser-aaa] quit
# Configure ISP domain aabbcc.net, and specify to perform local authentication.
[Sysname] domain aabbcc.net
[Sysname-isp-aabbcc.net] authentication lan-access local
[Sysname-isp-aabbcc.net] quit
# Enable MAC authentication globally.
[Sysname] mac-authentication
# Enable MAC authentication for port GigabitEthernet 2/0/1.
[Sysname] mac-authentication interface gigabitEthernet 2/0/1
# Specify the ISP domain for MAC authentication.
[Sysname] mac-authentication domain aabbcc.net
# Set the MAC authentication timers.
[Sysname] mac-authentication timer offline-detect 180
[Sysname] mac-authentication timer quiet 3
[Sysname] mac-authentication user-name-format fixed account aaa password
simple 123456
2) Verify the configuration
# Display global MAC authentication information.
<Sysname> display mac-authentication
MAC address authentication is Enabled.
Chapter 3 MAC Authentication Configuration
3-6