3com 4210 PWR 9-Port 3CR17341-91-ME ユーザーズマニュアル

As illustrated in Figure 83, a supplicant is connected to the switch through port 
Ethernet 1/0/2.

■

MAC authentication is required on port Ethernet 1/0/2 to control user access to 
the Internet.

■

All users belong to domain aabbcc.net. The authentication performed is locally 
and the MAC address of the PC (00-0d-88-f6-44-c1) is used as both the user 
name and password.

Figure 83   Network diagram for MAC authentication configuration

# Enable MAC authentication on port Ethernet 1/0/2.

<4210> system-view

 

[4210] mac-authentication interface Ethernet 1/0/2 

# Set the user name in MAC address mode for MAC authentication, requiring 
hyphened lowercase MAC addresses as the usernames and passwords.

[4210] mac-authentication authmode usernameasmacaddress usernameformat with-

hyphen lowercase 

# Add a local user.

■

Specify the user name and password.

[4210] local-user 00-0d-88-f6-44-c1

 

[4210-luser-00-0d-88-f6-44-c1] password simple 00-0d-88-f6-44-c1 

■

Set the service type to "lan-access".

[4210-luser-00-0d-88-f6-44-c1] service-type lan-access

 

[4210-luser-00-0d-88-f6-44-c1] quit 

# Add an ISP domain named aabbcc.net.

[4210] domain aabbcc.net

 

New Domain added. 

# Specify to perform local authentication.

[4210-isp-aabbcc.net] scheme local

 

[4210-isp-aabbcc.net] quit 

# Specify aabbcc.net as the ISP domain for MAC authentication

[4210] mac-authentication domain aabbcc.net 

IP network

PC

MAC: 00-0d-88-f6-44-c1 

Switch

Ethernet 1/0/2