To do…

 

 

 

Use the command…

 

Remarks

 

 

 

 

 

In system

 

mac-authentication interface

 

 

 

 

 

Enable MAC

 

view

 

interface-list

 

 

 

 

 

 

 

 

 

 

 

 

 

 

authentication for

 

 

 

interface interface-type

 

Use either method

 

 

 

the specified

 

In interface

 

interface-number

 

Disabled by default

 

 

 

port(s) or the

 

 

 

 

 

 

 

 

 

 

 

 

 

 

current port

 

view

 

mac-authentication

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

quit

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Set the username

 

mac-authentication authmode

 

Optional

 

 

 

 

 

By default, the MAC

 

 

 

in MAC address

 

usernameasmacaddress [ usernameformat

 

 

 

 

 

 

address of a user is

 

 

 

mode for MAC

{ with-hyphen without-hyphen } { lowercase

 

 

 

 

 

used as the

 

 

 

authentication

 

uppercase } fixedpassword password ]

 

 

 

 

 

 

username.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Set the

 

 

 

 

 

 

 

 

 

username in

 

 

 

 

 

 

 

 

 

fixed mode

 

mac-authentication authmode

 

 

 

 

 

Set the username

 

for MAC

 

usernamefixed

Optional

 

 

 

 

authenticatio

 

 

By default, the

 

 

 

in fixed mode for

 

n

 

 

 

 

 

 

 

 

username is “mac”

 

 

 

MAC

 

 

 

 

 

 

 

 

 

 

 

and no password is

 

 

 

authentication

 

Configure the

 

mac-authentication authusername

 

 

 

 

 

configured.

 

 

 

 

 

username

 

username

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Configure the

mac-authentication authpassword

 

 

 

 

 

 

 

password

 

password

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Required

 

 

 

Specify an ISP

 

 

 

 

 

The default ISP

 

 

 

domain for MAC

 

mac-authentication domain isp-name

 

domain (default

 

 

 

authentication

 

 

 

 

 

domain) is used by

 

 

 

 

 

 

 

 

 

default.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Optional

 

 

 

 

 

 

 

 

 

The default timeout

 

 

 

 

 

 

 

 

 

values are as

 

 

 

Configure the MAC

mac-authentication timer { offline-detect

 

follows:

 

 

 

 

300 seconds for

 

 

 

authentication

 

offline-detect-value quiet quiet-value

 

 

 

 

 

 

offline detect timer;

 

 

 

timers

 

server-timeoutserver-timeout-value }

 

 

 

 

 

 

60 seconds for quiet

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

timer; and

 

 

 

 

 

 

 

 

 

100 seconds for

 

 

 

 

 

 

 

 

 

server timeout timer

 

 

 

 

 

 

 

 

 

 

 

zIf MAC authentication is enabled on a port, you cannot configure the maximum number of dynamic MAC address entries for that port (through the mac-addressmax-mac-countcommand), and vice versa.

zIf MAC authentication is enabled on a port, you cannot configure port security (through the port-security enable command) on that port, and vice versa.

zYou can configure MAC authentication on a port before enabling it globally. However, the configuration will not take effect unless MAC authentication is enabled globally.

1-3

Page 296
Image 296
3Com WX3000 Mac-authentication interface, Mac-authentication Quit, Mac-authentication authmode, Usernamefixed