3com WX3000 Manuel D’Utilisation

Page de 715
 
1-1 
1  
MAC Authentication Configuration 
 
 
The sample output information in this manual was created on the WX3024. The output information on 
your device may vary. 
 
MAC Authentication Overview 
MAC authentication provides a way for authenticating users based on ports and MAC addresses, 
without requiring any client software to be installed on the hosts. Once detecting a new MAC address, it 
initiates the authentication process. During authentication, the user does not need to enter username or 
password manually. 
The device implements MAC authentication locally or on a RADIUS server.  
After determining the authentication method, users can select one of the following types of username as 
required: 
MAC address mode, where the MAC address of a user serves as both the username and the 
password. 
Fixed mode, where usernames and passwords are configured on the device in advance. In this 
case, the username, the password, and the limits on the total number of usernames are the 
matching criterion for successful authentication. For details, refer to AAA of this manual for 
information about local user attributes. 
Performing MAC Authentication on a RADIUS Server 
In RADIUS-based MAC authentication, the device serves as a RADIUS client and completes MAC 
authentication in combination of the RADIUS server. 
If the type of username is MAC address, the device sends a detected MAC address to the RADIUS 
server as both the username and password for authentication of the user. 
If the type of username is fixed username, the device sends the same username and password 
previously configured on the device to the RADIUS server for authentication of each user. 
A user can access a network upon passing the authentication performed by the RADIUS server. 
Performing MAC Authentication Locally 
In local MAC authentication, the device performs authentication for users locally and different items 
need to be manually configured for users on the device according to the specified type of username: 
If the username type is MAC address, a local user must be configured for each user on the device, 
using the MAC address of the accessing user as the username. Hyphens must or must not be