3com S7906E 설치 설명서
1-4
To do…
Use the command…
Remarks
Configure the username
and password for MAC
authentication
and password for MAC
authentication
mac-authentication
user-name-format { fixed
[ account name ] [ password
{ cipher | simple } password ] |
mac-address [ { with-hyphen |
without-hyphen } [ lowercase |
uppercase ] ] }
user-name-format { fixed
[ account name ] [ password
{ cipher | simple } password ] |
mac-address [ { with-hyphen |
without-hyphen } [ lowercase |
uppercase ] ] }
Optional
By default, the user’s source
MAC address (in lower case)
with “-” serves as the username
and password.
MAC address (in lower case)
with “-” serves as the username
and password.
interface interface-type
interface-number
interface-number
Set the maximum number
of concurrent MAC
authentication users
allowed on a port
of concurrent MAC
authentication users
allowed on a port
mac-authentication max-user
user-number
user-number
Optional
By default, the maximum
number allowed on a port is
1024.
number allowed on a port is
1024.
z
You can configure MAC authentication for ports first. However, the configuration takes effect only
after you enable MAC authentication globally.
z
Enabling MAC authentication on a port is mutually exclusive with adding the port to an aggregation
group and adding the port to a service loopback group.
z
For details about the default ISP domain, refer to AAA Configuration in the Security Volume.
Displaying and Maintaining MAC Authentication
To do…
Use the command…
Remarks
Display the global MAC
authentication information or
the MAC authentication
information about specified
ports
authentication information or
the MAC authentication
information about specified
ports
display mac-authentication
[ interface interface-list ]
[ interface interface-list ]
Available in any view
Clear the MAC authentication
statistics
statistics
reset mac-authentication
statistics [ interface
interface-list ]
statistics [ interface
interface-list ]
Available in user view
MAC Authentication Configuration Examples
Local MAC Authentication Configuration Example
Network requirements
As illustrated in
, a supplicant is connected to the device through port GigabitEthernet 2/0/1.
z
Local MAC authentication is required on every port to control user access to the Internet.
z
All users belong to domain aabbcc.net.
z
Local users use their MAC addresses as the usernames and passwords for authentication.
z
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.