To do...
Use the command...
Remarks
interface interface-type
interface-number
mac-authentication
specified port(s) or
the current port
In interface
view
quit
Disabled by default
Set the user name in
MAC address mode
a
easmacaddr
withou
uppercase
} |
fixedpassword password
]
Optional
t, the MAC
f a user is
for MAC address
authentication
mac-authentication
usernam
{
with-hyphen
|
uthmode
ess
[
usernameformat
t-hyphen
} {
lowercase
|
By defaul
address o
used as the user
name.
Set the user name in
MAC
n
fixed mode for
address
authenticatio
mac-authentication
authmode usernamefixed
Configure the user
mac-authentication
ername
name
authusername us
Set the user name in
fixed mode for MAC
Configure the
password
mac-authentication
authpassword password
Optional
the user
ac” and
address
authentication
By default,
name is “m
no password is
configured.
Specify an ISP
domain for MAC
address
mac-authentication domain isp-name
lt
is used by
authentication
Required
The default ISP
domain (defau
domain)
default.
Configure the MAC
address
authentication timers
mac-authentication
timer
{
offline-detect
offline-detect-value
|
quiet
quiet-value
|
server-timeout
server-timeout-value
}
s
offline detect timer;
60 seconds for quiet
timer; and
100 seconds for
server timeout timer
Optional
The default timeout
values are a
follows:
300 seconds for
z
If MAC address authentication is enabled on a port, you cannot configure port security (through the
port-security enable
command) on that port, and vice versa.
, the
If MAC address authentication is enabled on a port, you cannot configure the maximum number of
dynamic MAC address entries for that port (through the
mac-address max-mac-count
command),
and vice versa.
z
z
You can configure MAC address authentication on a port before enabling it globally. However
configuration will not take effect unless MAC address authentication is enabled globally.
35-3