Figure 394 Configuring MAC authentication globally

2.Configure MAC authentication for GigabitEthernet 1/0/1:

a.In the Ports With MAC Authentication Enabled area, click Add.

b.Select GigabitEthernet1/0/1 from the Port list, and click Apply.

Figure 395 Enabling MAC authentication for port GigabitEthernet 1/0/1

ACL assignment configuration example

Network requirements

As shown in Figure 396, the switch uses RADIUS servers to perform authentication, authorization, and accounting.

Configure MAC authentication on port GigabitEthernet 1/0/1 to control Internet access. Make sure an authenticated user can access the Internet but not the FTP server at 10.0.0.1.

Use MAC-based user accounts for MAC authentication users. The MAC addresses are not hyphenated.

411