Centralized Mac Address Authentication Configuration Example - 3Com 4200G 12-Port Configuration Manual

194 C 24: C
HAPTER ENTRALIZED
Centralized MAC
Address
Authentication
Configuration
Example
MAC A A
DDRESS UTHENTICATION
Centralized MAC address authentication configuration is similar to 802.1x. In this
example, the differences between the two lie in the following:
Centralized MAC address authentication needs to be enabled both globally and for
port.
In MAC address mode, Mac address of locally authenticated user is used as both user
name and password.
In MAC address mode, MAC address of user authenticated by RADIUS server need to
be configured as both user name and password on the RADIUS server.
The following section describes how to enable centralized MAC address
authentication globally and for a port, and how to configure a local user. For other
related configuration, refer to the configuration examples in Chapter 21.
1 Enable centralized MAC address authentication for GigabitEthernet 1/0/2 port.
<S4200G> system-view
[4200G] mac-authentication interface GigabitEthernet 1/0/2
2 Configure centralized MAC address authentication mode as MAC address mode.
[4200G] mac-authentication authmode usernameasmacaddress
3 Add a local user.
a Configure the user name and password.
[4200G] local-user 00-e0-fc-01-01-01
[4200G-luser-00-e0-fc-01-01-01] password simple 00-e0-fc-01-01-01
b Set service type of the local user to lan-access.
[4200G-luser-00-e0-fc-01-01-01] service-type lan-access
4 Enable centralized MAC address authentication globally.
[4200G] mac-authentication
5 Configure the domain name for centralized MAC address authentication users as
aabbcc163.net.
[4200G] mac-authentication domain aabbcc163.net
For domain-related configuration, refer to Chapter 21.
C
ONFIGURATION