H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 153)

139
Verifying the configuration
# After the WLAN user passes MAC authentication, display MAC authentication settings and statistics.
display mac-authentication interface WLAN-DBSS 0:0
MAC address authentication is enabled.
User name format is MAC address in lowercase, like xx-xx-xx-xx-xx-xx
Fixed username:mac
Fixed password:not configured
Offline detect period is 180s
Quiet period is 180s
Server response timeout value is 100s
The max allowed user number is 4096 per slot
Current user number amounts to 1
Current domain is aabbcc.net
Silent MAC User info:
MAC Addr From Port Port Index
WLAN-DBSS0:6 is link-up
MAC address authentication is enabled
Authenticate success: 0, failed: 0
Max number of on-line users is 4096
Current online user number is 1
MAC Addr Authenticate State Auth Index
00e0-fc12-3456 MAC_AUTHENTICATOR_AUTHOR 1299
# Display the online user information.
display connection
Index=1299,[email protected]
MAC=00-E0-FC-12-34-56
IP=N/A
IPv6=N/A
Total 1 connection(s) matched.
RADIUS-based MAC authentication configuration example
Network requirements
As shown in Figure 65 , a WLAN client connects to the AC through a switch. The AC uses RADIUS servers
for authentication, authorization, and accounting.
Perform MAC authentication on WLAN-ESS interface to control Internet access. Make sure that:
• The AC detects whether a user has gone offline every 180 seconds. If a user fails authentication, the
AC does not authenticate the user within 180 seconds.
• All MAC authentication users belong to ISP domain 2000 and share the user account aaa with
password 123456.