3Com S7906E - Switch, Configuration Manual

Page: 1909 / 2621

1-1
1
MAC Authentication Configuration
When configuring MAC authentication, go to these sections for information you are interested in:
z
MAC Authentication Overview
z
Related Concepts
z
Configuring MAC Authentication
z
Displaying and Maintaining MAC Authentication
z
MAC Authentication Configuration Examples
MAC Authentication Overview
MAC authentication provides a way for authenticating users based on ports and MAC addresses. Once
detecting a new MAC address, the device initiates the authentication process. MAC authentication
requires neither client software to be installed on the hosts, nor any username or password to be
entered by users during authentication.
Currently, the device supports two MAC authentication modes: Remote Authentication Dial-In User
Service (RADIUS) based MAC authentication and local MAC authentication. For detailed information
about RADIUS authentication and local authentication, refer to AAA Configuration of the Security
Volume .
MAC authentication supports two types of usernames:
z
MAC address, where the MAC address of a user serves as both the username and password.
z
Fixed username, where all users use the same preconfigured username and password for
authentication, regardless of the MAC addresses. Multiple users can be authenticated on the same
port, using the same username and password.
RADIUS-Based MAC Authentication
In RADIUS-based MAC authentication, the device serves as a RADIUS client and requires a RADIUS
server to cooperate with it.
z
If the type of username is MAC address, the device forwards a detected MAC address as the
username and password to the RADIUS server for authentication of the user.
z
If the type of username is fixed username, the device sends the same username and password
configured locally to the RADIUS server for authentication of each user.
If the authentication succeeds, the user will be granted permission to access the network resources.
Local MAC Authentication
In local MAC authentication, the device performs authentication of users locally and different items
need to be manually configured for users on the device according to the specified type of username:
z
If the type of username is MAC address, a local user must be configured for each user on the
device, using the MAC address of the accessing user as both the username and password.