3Com Switch 7754, Configuration Manual

Page: 234 / 940

234 C
HAPTER
29: C
ENTRALIZED
MAC A
DDRESS
A
UTHENTICATION
C
ONFIGURATION
Centralized MAC
Address
Authentication
Configuration
The following are centralized MAC address authentication configuration tasks:
■
“Enabling Centralized MAC Address Authentication Globally” on page 234
■
“Enabling Centralized MAC Address Authentication for a Port” on page 234
■
“Configuring Centralized MAC Address Authentication Mode” on page 235
■
“Configuring the ISP Domain for MAC Address Authentication Users” on page
235
■
“Configuring the Timers Used in Centralized MAC Address Authentication” on
page 236
■
“Configuring Centralized MAC Address Re-Authentication” on page 236
c
CAUTION: The configuration of the maximum number of learned MAC addresses
(refer to the mac-address max-mac-count command) is unavailable for the
ports with centralized MAC address authentication enabled. Similarly, the
centralized MAC address authentication is unavailable for the ports with the
maximum number of learned MAC addresses configured.
■
If a port is enabled with the centralized MAC address authentication, you
cannot configure the maximum number of MAC addresses that the port can
learn. And, if you have configured the maximum number of MAC addresses
that the port can learn, you are not allowed to enable the centralized MAC
address authentication function on the port.
■
If a port is already enabled with the 802.1x function, and the access control
mode of the port is not configured as
macbased , you are not allowed to
enable the centralized MAC address authentication function on the port.
■
If a port is already enabled with the centralized MAC address authentication
function, you cannot add the port to a link aggregation group. And, if the port
is already in a aggregation group, you are not allowed to enable the
centralized MAC address authentication function on the port.
■
If a port is enabled with the centralized MAC address authentication function,
you cannot configure the port as a reflector port, and vice versa.
■
You cannot enable both the port security feature and the centralized MAC
address authentication function on a port.
Enabling Centralized
MAC Address
Authentication Globally
Enabling Centralized
MAC Address
Authentication for a
Port
You can enable centralized MAC address authentication for a port in system view
or in Ethernet port view.
Table 162 Enable centralized MAC address authentication globally
Operation Command Description
Enter system view system-view -
Enable centralized MAC
address authentication
globally mac-authentication Required
By default, centralized MAC
address authentication is
globally disabled.