Related Concepts; Mac Authentication Timers; Quiet Mac Address; Configuring Basic Mac Authentication Functions - 3Com 4210 9-Port Configuration Manual

Related Concepts

MAC Authentication Timers

The following timers function in the process of MAC authentication:
Offline detect timer: At this interval, the switch checks to see whether an online user has gone
offline. Once detecting that a user becomes offline, the switch sends a stop-accounting notice to
the RADIUS server.
Quiet timer: Whenever a user fails MAC authentication, the switch does not initiate any MAC
authentication of the user during a period defined by this timer.
Server timeout timer: During authentication of a user, if the switch receives no response from the
RADIUS server in this period, it assumes that its connection to the RADIUS server has timed out
and forbids the user from accessing the network.

Quiet MAC Address

When a user fails MAC authentication, the MAC address becomes a quiet MAC address, which means
that any packets from the MAC address will be discarded simply by the switch until the quiet timer
expires. This prevents an invalid user from being authenticated repeatedly in a short time.
If the quiet MAC is the same as the static MAC configured or an authentication-passed MAC, then
the quiet function is not effective.
The S4210 series Ethernet switches support quiet MAC function on ports.

Configuring Basic MAC Authentication Functions

Table 1-1 Configure basic MAC authentication functions
Operation
Enter system view
Enable MAC
authentication
globally
Enable MAC
authentication for the
specified port(s) or the
current port
Set the user name in
MAC address mode
for MAC
authentication
Command
system-view
mac-authentication
mac-authentication interface
In system view
interface-list
interface interface-type
interface-number
In interface
view mac-authentication
quit
mac-authentication authmode
usernameasmacaddress [ usernameformat
{ with-hyphen | without-hyphen } { lowercase |
uppercase } | fixedpassword password ]
1-2
Remarks
—
Required
Disabled by default
Use either method
Disabled by default
Optional
By default, the MAC
address of a user is
used as the user
name.