H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 151)

137
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter WLAN-ESS
interface view.
interface interface-type
interface-number
N/A
3. Specify a MAC
authentication guest
VLAN.
mac-authentication guest-vlan
guest-vlan-id
By default, no MAC authentication
guest VLAN is configured.
You can configure only one MAC
authentication guest VLAN on a
port.
Displaying and maintaining MAC authentication
Task Command Remarks
Display MAC authentication
information.
display mac-authentication
[ interface interface-list ] [ | { begin
| exclude | include }
regular-expression ]
Available in any view
Clear MAC authentication
statistics. reset mac-authentication statistics
[ interface interface-list ]
Available in user view
MAC authentication configuration examples
Local MAC authentication configuration example
Network requirements
In the network in Figure 64 , perform local MAC authentication on WLAN-ESS interface of the AC to
control Internet access. Make sure that:
• All users belong to domain aabbcc.net.
• Local users use their MAC address as the username and password for MAC authentication. The
MAC addresses are hyphen separated and in lower case.
• The AC detects whether a user has gone offline every 180 seconds. When a user fails
authentication, the AC does not authenticate the user within 180 seconds.
Figure 64 Network diagram
Configuration procedure
# Add a local user account, set both the username and password to 00-e0-fc-12-34-56, the MAC address
of the user host, and enable LAN access service for the account.