Huawei Quidway S3900 Series Operation Manual page 561

Operation Manual -- Centralized MAC Address Authentication
Quidway S3900 Series Ethernet Switches-Release 1510
Note:
Centralized MAC address authentication configuration is similar to that of 802.1x. In
this example, the differences between the two lie in:
Centralized MAC address authentication needs to be enabled both globally and for
port.
In MAC address mode, MAC address of locally authenticated user is used as both
user name and password.
In MAC address mode, MAC address of user authenticated by RADIUS server need
to be configured as both user name and password on the RADIUS server.
The following section describes how to enable centralized MAC address authentication
globally and for a port, and how to configure a local user. For other related configuration,
refer to the configuration examples in "802.1x" Configuration.
# Enable centralized MAC address authentication for Ethernet 1/0/2 port.
<Quidway> system-view
[Quidway] mac-authentication interface GigabitEthernet 1/0/2
# Configure centralized MAC address authentication mode as MAC address mode, and
use hyphened MAC addresses as the user names and passwords for authentication.
[Quidway]
with-hyphen
# Add a local user.
Configure the user name and password.
[Quidway] local-user 00-e0-fc-01-01-01
[Quidway-luser-00-e0-fc-01-01-01] password simple 00-e0-fc-01-01-01
Set service type of the local user to lan-access.
[Quidway-luser-00-e0-fc-01-01-01] service-type lan-access
# Enable centralized MAC address authentication globally.
[Quidway-luser-00-e0-fc-01-01-01] quit
[Quidway] mac-authentication
# Configure the domain name for centralized MAC address authentication users as
aabbcc163.net.
[Quidway] mac-authentication domain aabbcc163.net
For domain-related configuration, refer to the "802.1x" Configuration Example part of
this manual.
mac-authentication
Huawei Technologies Proprietary
Chapter 1 Centralized MAC Address
authmode usernameasmacaddress
1-6
Authentication Configuration
userformat