H3C Technologies H3C S3600 Series Switches - Manual (Page 572)

1-7
z If both the limit on the number of MAC address authentication users and the limit on the number of
users configured in the port security function are configured for a port, the smaller value of the two
configured limits is adopted as the maximum number of MAC address authentication users allowed
to access this port. Refer to the Port Security manual for the description on the port security
function.
z You cannot configure the maximum number of MAC address authentication users for a port if any
user connected to this port is online.
Displaying and Maintaining MAC Address Authentication
Configuration
To do... Use the command... Remarks
Display global or on-port
information about MAC
address authentication
display mac-authentication [ interface
interface-list ] Available in any
view
Clear the statistics of global or
on-port MAC address
authentication reset mac-authentication statistics
[ interface interface-type
interface-number ]
Available in user
view
MAC Address Authentication Configuration Examples
Network requirements
As illustrated in Figure 1-1 , a supplicant is connected to the switch through port Ethernet 1/0/2.
z MAC address authentication is required on port Ethernet 1/0/2 to control user access to the
Internet.
z All users belong to domain aabbcc.net. The authentication performed is locally and the MAC
address of the PC (00-0d-88-f6-44-c1) is used as both the user name and password.
Network Diagram
Figure 1-1 Network diagram for MAC address authentication configuration
Configuration Procedure
# Enable MAC address authentication on port Ethernet 1/0/2.
system-view
[Sysname] mac-authentication interface Ethernet 1/0/2