3com 4210 PWR 9-Port 3CR17341-91-ME User Manual

C

HAPTER

 22: MAC A

UTHENTICATION

 C

ONFIGURATION

■

The service type of a local user needs to be configured as lan-access.

The following timers function in the process of MAC authentication:

■

Offline detect timer: At this interval, the switch checks to see whether an 
online user has gone offline. Once detecting that a user becomes offline, the 
switch sends a stop-accounting notice to the RADIUS server.

■

Quiet timer: Whenever a user fails MAC authentication, the switch does not 
initiate any MAC authentication of the user during a period defined by this 
timer.

■

Server timeout timer: During authentication of a user, if the switch receives no 
response from the RADIUS server in this period, it assumes that its connection 
to the RADIUS server has timed out and forbids the user from accessing the 
network.

When a user fails MAC authentication, the MAC address becomes a quiet MAC 
address, which means that any packets from the MAC address will be discarded 
simply by the switch until the quiet timer expires. This prevents an invalid user 
from being authenticated repeatedly in a short time.

c 

Table 204   Configure basic MAC authentication functions

Enter system 
view 

- 

Enable MAC 
authentication 
globally 

Required

Disabled by default 

Enable MAC 
authentication 
for the specified 
port(s) or the 
current port 

In system 
view 

mac-authentication interface 
interface-list

Use either method

Disabled by default 

In 
interface 
view 

interface interface-type 
interface-number

Set the user 
name in MAC 
address mode 
for MAC 
authentication 

mac-authentication authmode 
usernameasmacaddress [ usernameformat { 
with-hyphen | without-hyphen } { lowercase | 
uppercase } | fixedpassword password ]

Optional

By default, the MAC 
address of a user is used 
as the user name.