1-5
z
Different ports can be configured with different guest VLANs, but a port can be configured with only
one guest VLAN.
z
If you configure both the 802.1X authentication MGV and the MAC authentication MGV on a port,
only the 802.1X authentication MGV will take effect. For description on 802.1X authentication MGV,
refer to
802.1X Configuration
in the
Security Volume
.
z
The priority of the MGV function is higher than that of the intrusion protection function of blocking
frames from a specified MAC address, but lower than that of the intrusion protection function of
disabling the port. For the port intrusion protection functions, refer to
Port Security Configuration
in
the
Security Volume
.
z
The priority of the MGV function is higher than that of the quiet MAC function of MAC
authentication.
z
You cannot configure both the guest VLAN function and the free IP function in EAD fast
deployment on a port. For the free IP configuration, refer to
802.1X Configuration
in the
Security
Volume
.
Displaying and Maintaining MAC Authentication
To do…
Use the command…
Remarks
Display the global MAC authentication
information or the MAC authentication
information about specified ports
display mac-authentication
[
interface
interface-list
]
Available in any view
Clear the MAC authentication statistics
reset mac-authentication statistics
[
interface
interface-list
]
Available in user view
MAC Authentication Configuration Examples
Local MAC Authentication Configuration Example
Network requirements
As illustrated in
Figure 1-1
, a supplicant is connected to the device through port GigabitEthernet 1/0/1.
z
Local MAC authentication is required on every port to control user access to the Internet.
z
All users belong to domain aabbcc.net.
z
Local users use their MAC addresses as the usernames and passwords for authentication.
z
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
Figure 1-1
Network diagram for local MAC authentication
