H3C Technologies H3C S7500E Series Switches - Manual (Page 131)

7-5
Specifying a Domain for MAC Authentication Users
By default, the default authentication domain is used for MAC address authentication of users. To
support more flexible access policy configuration, the device allows you to specify authentication
domain for all ports in system view.
Follow these steps to specify an authentication domain for MAC authentication users:
To do… Use the command… Remarks
Enter system view system-view —
Specify an authentication
domain for MAC
authentication users
mac-authentication domain
domain-name
Required
Use either approach
By default, no authentication domain is
specified and the system default
authentication domain is used for MAC
authentication users.
Displaying and Maintaining MAC Authentication
To do… Use the command… Remarks
Display the MAC authentication
related information
display mac-authentication
[ interface interface-list ]
Available in any view
Clear the MAC authentication
statistics
reset mac-authentication
statistics [ interface
interface-list ]
Available in user view
MAC Authentication Configuration Examples
Local MAC Authentication Configuration Example
Network requirements
As illustrated in Figure 7-1 , a host is connected to the device through port GigabitEthernet 2/0/1.
z Local MAC authentication is required on port GigabitEthernet 2/0/1 to control user access to the
Internet.
z All users belong to domain aabbcc.net.
z Local users use their MAC addresses as the usernames and passwords for authentication, where
the MAC addresses are with hyphens and in lower case.
z The device detects whether a user is offline every 180 seconds. When a user fails authentication,
the device does not authenticate the user within 180 seconds.