beautypg.com

Network requirements, Configuration procedure – H3C Technologies H3C S7500E Series Switches User Manual

Page 133

background image

7-7

Silent Mac User info:

MAC Addr From Port Port Index

GigabitEthernet2/0/1 is link-up

MAC address authentication is enabled

Authenticate success: 1, failed: 0

Max number of on-line users is 1024

Current online user number is 1

MAC Addr Authenticate state Auth Index

00e0-fc12-3456 MAC_AUTHENTICATOR_SUCCESS 29

# After the user passes authentication, you can use the display connection command to display the

online user information:

display connection

Slot: 2

Index=29 ,[email protected]

IP=N/A

MAC=00e0-fc12-3456

Total 1 connection(s) matched on slot 2.

Total 1 connection(s) matched.

RADIUS-Based MAC Authentication Configuration Example

Network requirements

As illustrated in

Figure 7-2

, a host is connected to the device through port GigabitEthernet 2/0/1. The

device authenticates, authorizes, and keeps accounting on the host through the RADIUS server.

z

MAC authentication is required on port GigabitEthernet 2/0/1 to control user access to the

Internet.

z

The device detects whether a user is offline every 180 seconds. If a user fails authentication, the

device does not authenticate the user within 180 seconds.

z

All users belong to ISP domain 2000.

z

The fixed username aaa and password 123456 are used for authentication of all users.

Figure 7-2 Network diagram for RADIUS-based MAC authentication

Configuration procedure