H3C Technologies H3C S3100 Series Switches - Manual (Page 348)

Operation Manual – Centralized MAC Address Authentication
H3C S3100-52P Ethernet Switch
Chapter 1 Centralized MAC Address
Authentication Configuration
1-2
form. The input format should be the same as the configured format, or else, the
authentication will fail.
z
For fixed mode, configure the local user names and passwords as those for fixed
mode.
z
The service type of a local user needs to be configured as lan-access.
1.2 Centralized MAC Address Authentication Configuration
The following are centralized MAC address authentication configuration tasks:
z
Enabling Centralized MAC Address Authentication Globally
z
Enabling Centralized MAC Address Authentication for a Port
z
Configuring Centralized MAC Address Authentication Mode
z
Configuring the ISP Domain for MAC Address Authentication Users
z
Configuring the Timers Used in Centralized MAC Address Authentication
Caution:
The configuration of the maximum number of learned MAC addresses (refer to the
mac-address max-mac-count
command) is unavailable for the ports with centralized
MAC address authentication enabled. Similarly, the centralized MAC address
authentication is unavailable for the ports with the maximum number of learned MAC
addresses configured.
1.2.1 Enabling Centralized MAC Address Authentication Globally
Table 1-1
Enable centralized MAC address authentication
Operation Command Description
Enter system view
system-view
—
Enable centralized MAC
address authentication
globally
mac-authentication
Required
By default, centralized MAC
address authentication is
globally disabled.
1.2.2 Enabling Centralized MAC Address Authentication for a Port
You can enable centralized MAC address authentication for a port in system view or in
Ethernet port view.