H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 286)

29-3
To do… Use the command… Remarks
In system
view mac-authentication
interface interface-list
interface interface-type
interface-number
mac-authentication
Enable MAC
authentication for the
specified port(s) or
the current port
In interface
view
quit
Use either method
Disabled by default
Set the username in
MAC address mode
for MAC
authentication
mac-authentication authmode
usernameasmacaddress
[ usernameformat
{ with-hyphen | without-hyphen }
{ lowercase | uppercase } | fixedpassword
password
]
Optional
By default, the MAC address of a
user is used as the username.
Set the
username in
fixed mode for
MAC
authentication
mac-authentication
authmode usernamefixed
Configure the
username mac-authentication
authusername username
Set the username in
fixed mode for MAC
authentication
Configure the
password mac-authentication
authpassword password
Optional
By default, the username is “mac”
and no password is configured.
Specify an ISP
domain for MAC
authentication
mac-authentication domain isp-name
Required
The default ISP domain (default
domain) is used by default.
Configure the MAC
authentication timers
mac-authentication timer { offline-detect
offline-detect-value | quiet quiet-value |
server-timeout server-timeout-value }
Optional
The default timeout values are as
follows:
300 seconds for offline detect timer;
60 seconds for quiet timer; and
100 seconds for server timeout timer
z
If MAC authentication is enabled on a port, you cannot configure the maximum number of dynamic
MAC address entries for that port (through the mac-address max-mac-count command), and
vice versa.
z
If MAC authentication is enabled on a port, you cannot configure port security (through the
port-security enable command) on that port, and vice versa.
z
You can configure MAC authentication on a port before enabling it globally. However, the
configuration will not take effect unless MAC authentication is enabled globally.
MAC Address Authentication Enhanced Function Configuration
MAC Address Authentication Enhanced Function Configuration Tasks
Complete the following tasks to configure MAC address authentication enhanced function: