3com 4210 Manual De Usuario
Configuring Port Security mac-else-userlogin-secure-ext Mode
57
# Set aabbcc.net as the default user domain.
[3Com] domain default enable aabbcc.net
# Set the maximum number of concurrent 802.1x users.
[3Com] dot1x max-user 64
# Configure the switch to use MAC addresses as usernames for authentication,
specifying that the MAC addresses should be lowercase without separators.
specifying that the MAC addresses should be lowercase without separators.
[3Com] mac-authentication authmode usernameasmacaddress usernameform
at without-hyphen
# Specify the ISP domain for MAC authentication.
[3Com] mac-authentication domain aabbcc.net
# Enable port security.
[3Com] port-security enable
# Set the maximum number of secure MAC addresses allowed on the port to 200.
[3Com] interface Ethernet 1/0/1
[3Com-Ethernet1/0/1] port-security max-mac-count 200
# Set the port security mode to mac-else-userlogin-secure-ext.
[3Com-Ethernet1/0/1] port-security port-mode mac-else-userlogin-secure-ext
# Set the NeedToKnow mode of the port to ntkonly.
[3Com-Ethernet1/0/1] port-security ntk-mode ntkonly
Complete Configuration
#
domain default enable aabbcc.net
#
port-security enable
#
MAC-authentication domain aabbcc.net
#
radius scheme radius1
server-type standard
primary authentication 192.168.1.3
primary accounting 192.168.1.2
secondary authentication 192.168.1.2
secondary accounting 192.168.1.3
key authentication name
key accounting money
timer realtime-accounting 15
timer response-timeout 5
retry 5
user-name-format without-domain
#
domain aabbcc.net
scheme radius-scheme radius1