beautypg.com

H3C Technologies H3C S3100 Series Switches User Manual

Page 458

background image

1-3

Operation

Command

Remarks

Set the user
name in fixed
mode for MAC
authentication

mac-authentication
authmode usernamefixed

Configure the
user name

mac-authentication
authusername username

Set the user name in
fixed mode for MAC
authentication

Configure the
password

mac-authentication
authpassword
password

Optional

By default, the user name
is “mac” and no password
is configured.

Specify an ISP
domain for MAC
authentication

mac-authentication domain isp-name

Required

By default, no ISP domain
is specified and the default
domain is used.

Configure the MAC
authentication timers

mac-authentication timer { offline-detect
offline-detect-value | quiet quiet-value |
server-timeout
server-timeout-value }

Optional

The default timeout values
are as follows:

300 seconds for offline
detect timer;

60 seconds for quiet timer;
and

100 seconds for server
timeout timer

Enter Ethernet
interface view

interface interface-type interface-number

Set the offline detect
timer for MAC
authentication on the
Ethernet port view

mac-authentication timer offline-detect
offline-detect-value

Optional

300 seconds for offline
detect timer by default

z

If MAC authentication is enabled on a port, you cannot configure the maximum number of dynamic

MAC address entries for that port (through the mac-address max-mac-count command), and

vice versa.

z

If MAC authentication is enabled on a port, you cannot configure port security (through the

port-security enable command) on that port, and vice versa.

z

You can configure MAC authentication on a port before enabling it globally. However, the

configuration will not take effect unless MAC authentication is enabled globally.

z

The offline detect timer configured in system view applies to all MAC authentication-enabled ports.

z

The offline detect timer configured in Ethernet port view applies to the current port only. You can

set the offline detect timer to different values on different Ethernet ports.

z

The offline detect timer configured in Ethernet port view takes precedence over the one configured

in system view.