3com 4210 PWR 9-Port 3CR17341-91-ME User Manual

c 

■

If MAC authentication is enabled on a port, you cannot configure the 
maximum number of dynamic MAC address entries for that port (through the 
mac-address max-mac-count command), and vice versa.

■

If MAC authentication is enabled on a port, you cannot configure port security 
(through the port-security enable command) on that port, and vice versa.

■

You can configure MAC authentication on a port before enabling it globally. 
However, the configuration will not take effect unless MAC authentication is 
enabled globally.

Set the user 
name in fixed 
mode for MAC 
authentication 

Set the user name in fixed 
mode for MAC authentication

mac-authentica
tion authmode 
usernamefixed 

Optional

By default, the user 
name is "mac" and no 
password is configured. 

Configure the user name

mac-authentica
tion 
authusername 
username

Configure the password

mac-authentica
tion 
authpassword 
password

Specify an ISP 
domain for 
MAC 
authentication 

mac-authentication domain isp-name

Required

The default ISP domain 
(default domain) is used 
by default. 

Configure the 
MAC 
authentication 
timers 

mac-authentication timer { offline-detect 
offline-detect-value | quiet quiet-value | 
server-timeout server-timeout-value }

Optional

The default timeout 
values are as follows:

300 seconds for offline 
detect timer;

60 seconds for quiet 
timer; and

100 seconds for server 
timeout timer

Table 204   Configure basic MAC authentication functions

Table 205   MAC address authentication enhanced function configuration tasks

Configure a Guest VLAN 

Optional 

Configure the maximum 
number of MAC address 
authentication users allowed 
to access a port 

Optional