H3C Technologies H3C S7500E Series Switches - Manual (Page 129)

7-3
device, and the device will apply the ACL to the port connecting the user to filter packets. You can
change access rights of users by modifying authorization ACL settings on the RADIUS server.
MAC Authentication Configuration Task List
Complete the following tasks to configure MAC authentication:
Task Remarks
Basic Configuration for MAC Authentication Required
Specifying a Domain for MAC Authentication Users Optional
Basic Configuration for MAC Authentication
Configuration Prerequisites
z Create and configure an ISP domain.
z For local authentication, create the local users and configure the passwords, and configure the
service type of the local users as lan-access.
z For RADIUS authentication, ensure that a route is available between the device and the RADIUS
server, and add the user accounts (usernames and passwords) on the RADIUS server.
When adding user accounts on the local device or on the authentication server, ensure that the
username and password configuration satisfies the requirements of the username type of MAC
authentication.
Configuration Procedure
MAC authentication can take effect on a port only when it is configured globally and on the port.
Configuring MAC authentication globally
Follow these steps to configure MAC authentication globally:
To do… Use the command… Remarks
Enter system view system-view —
Enable MAC authentication
globally
mac-authentication
Required
Disabled by default