Filter
Top Products
1-3
To do… Use the command… Remarks
In system
view
mac-authentication interface
interface-list
interface interface-type
interface-number
mac-authentication
Enable MAC
authentication for
the specified
port(s) or the
current port
In interface
view
quit
Use either method
Disabled by default
Set the username
in MAC address
mode for MAC
authentication
mac-authentication authmode
usernameasmacaddress [ usernameformat
{ with-hyphen | without-hyphen } { lowercase |
uppercase } | fixedpassword password ]
Optional
By default, the MAC
address of a user is
used as the
username.
Set the
username in
fixed mode
for MAC
authenticatio
n
mac-authentication authmode
usernamefixed
Configure the
username
mac-authentication authusername
username
Set the username
in fixed mode for
MAC
authentication
Configure the
password
mac-authentication authpassword
password
Optional
By default, the
username is “mac”
and no password is
configured.
Specify an ISP
domain for MAC
authentication
mac-authentication domain isp-name
Required
The default ISP
domain (default
domain) is used by
default.
Configure the MAC
authentication
timers
mac-authentication timer { offline-detect
offline-detect-value | quiet quiet-value |
server-timeout server-timeout-value }
Optional
The default timeout
values are as
follows:
300 seconds for
offline detect timer;
60 seconds for quiet
timer; and
100 seconds for
server timeout timer
z If MAC authentication is enabled on a port, you cannot configure the maximum number of dynamic
MAC address entries for that port (through the mac-address max-mac-count command), and
vice versa.
z If MAC authentication is enabled on a port, you cannot configure port security (through the
port-security enable command) on that port, and vice versa.
z You can configure MAC authentication on a port before enabling it globally. However, the
configuration will not take effect unless MAC authentication is enabled globally.