beautypg.com

Configuring a mac authentication guest vlan, Configuration prerequisites, Configuration guidelines – H3C Technologies H3C WX3000E Series Wireless Switches User Manual

Page 150: Configuration procedure

background image

136

To specify an authentication domain for MAC authentication users:

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Specify an authentication
domain for MAC

authentication users.

Approach 1:
mac-authentication domain

domain-name

Approach 2:

a.

interface interface-type

interface-number

b.

mac-authentication domain

domain-name

Use either approach.
By default, the system default

authentication domain is used for
MAC authentication users.

Configuring a MAC authentication guest VLAN

Configuration prerequisites

Before you configure a MAC authentication guest VLAN on a port, complete the following tasks:

Enable MAC authentication.

Enable MAC-based VLAN on the port.

Create the VLAN to be specified as the MAC authentication guest VLAN.

Configuration guidelines

Follow the guidelines in

Table 8

when configuring a MAC authentication guest VLAN on a port.

Table 8 Relationships of the MAC authentication guest VLAN with other security features

Feature Relationship description

Reference

Quiet function of MAC
authentication

The MAC authentication guest VLAN
function has higher priority. A user can
access any resources in the guest VLAN.

See "Configuring MAC
authentication"

Port intrusion protection

The MAC authentication guest VLAN
function has higher priority than the block

MAC action but lower priority than the shut

down port action of the port intrusion
protection feature.

See "Configuring port security"

802.1X guest VLAN on a
port that performs

MAC-based access

control

The MAC authentication guest VLAN has a
lower priority.

See "Configuring 802.1X"

Configuration procedure

To configure a MAC authentication guest VLAN: