3com S7906E 설치 설명서

 

1-5 

Figure 1-1 Network diagram for local MAC authentication 

 

 

 

1)  Configure MAC authentication on the device 

# Add a local user, setting the username and password as 00-e0-fc-12-34-56, the MAC address of the 

user. 

<Device> system-view 

[Device] local-user 00-e0-fc-12-34-56 

[Device-luser-00-e0-fc-12-34-56] password simple 00-e0-fc-12-34-56 

[Device-luser-00-e0-fc-12-34-56] service-type lan-access 

[Device-luser-00-e0-fc-12-34-56] quit 

# Configure ISP domain aabbcc.net, and specify that the users in the domain use local authentication. 

[Device] domain aabbcc.net 

[Device-isp-aabbcc.net] authentication lan-access local 

[Device-isp-aabbcc.net] quit 

# Enable MAC authentication globally. 

[Device] mac-authentication 

# Enable MAC authentication for port GigabitEthernet 2/0/1.  

[Device] mac-authentication interface gigabitethernet 2/0/1 

# Specify the ISP domain for MAC authentication. 

[Device] mac-authentication domain aabbcc.net 

# Set the MAC authentication timers. 

[Device] mac-authentication timer offline-detect 180 

[Device] mac-authentication timer quiet 180 

# Specify the MAC authentication username format as MAC address, that is, using the MAC address 

(with hyphens) of a user as the username and password for MAC authentication of the user. 

[Device] mac-authentication user-name-format mac-address with-hyphen 

2)  Verify the configuration 

# Display global MAC authentication information. 

<Device> display mac-authentication 

MAC address authentication is enabled. 

 User name format is MAC address in lowercase, like xx-xx-xx-xx-xx-xx 

 Fixed username:mac 

 Fixed password:not configured 

          Offline detect period is 180s 

          Quiet period is 180s. 

          Server response timeout value is 100s