Mac Authentication Configuration Example - 3Com 4210 PWR Configuration Manual

MAC Authentication
Configuration
Example
Network requirements
As illustrated in Figure 83, a supplicant is connected to the switch through port
Ethernet 1/0/2.
MAC authentication is required on port Ethernet 1/0/2 to control user access to
■
the Internet.
All users belong to domain aabbcc.net. The authentication performed is locally
■
and the MAC address of the PC (00-0d-88-f6-44-c1) is used as both the user
name and password.
Network Diagram
Figure 83 Network diagram for MAC authentication configuration
Ethernet 1/0/2
PC
MAC: 00-0d-88-f6-44-c1
Configuration Procedure
# Enable MAC authentication on port Ethernet 1/0/2.
<4210> system-view
[4210] mac-authentication interface Ethernet 1/0/2
# Set the user name in MAC address mode for MAC authentication, requiring
hyphened lowercase MAC addresses as the usernames and passwords.
[4210] mac-authentication authmode usernameasmacaddress usernameformat with-
hyphen lowercase
# Add a local user.
Specify the user name and password.
■
[4210] local-user 00-0d-88-f6-44-c1
[4210-luser-00-0d-88-f6-44-c1] password simple 00-0d-88-f6-44-c1
Set the service type to "lan-access".
■
[4210-luser-00-0d-88-f6-44-c1] service-type lan-access
[4210-luser-00-0d-88-f6-44-c1] quit
# Add an ISP domain named aabbcc.net.
[4210] domain aabbcc.net
New Domain added.
# Specify to perform local authentication.
[4210-isp-aabbcc.net] scheme local
[4210-isp-aabbcc.net] quit
# Specify aabbcc.net as the ISP domain for MAC authentication
[4210] mac-authentication domain aabbcc.net

MAC Authentication Configuration Example

IP network
Switch
275