H3C S5120-EI Series, Operation Manual

Page: 593 / 1191

1-4
To do… Use the command… Remarks
Set the server timeout timer
mac-authentication timer
server-timeout server-timeout-value
Optional
100 seconds by default
Configure the username and
password for MAC
authentication
mac-authentication
user-name-format
{
fixed
[
account
name
] [
password
{
cipher
|
simple
}
password
] |
mac-address
[
with-hyphen
|
without-hyphen
] }
Optional
By default, the user’s source MAC
address serves as the username
and password, without “-“ in the
MAC address.
z
You can configure MAC authentication for ports first. However, the configuration takes effect only
after you enable MAC authentication globally.
z
Enabling MAC authentication on a port is mutually exclusive with adding the port to an aggregation
group.
z
For details about the default ISP domain, refer to
AAA Configuration
in the
Security Volume
.
Configuring a Guest VLAN
Configuration Prerequisites
z
Enable MAC authentication.
z
Enable MAC VLAN on the port.
z
Create the VLAN to be specified as the guest VLAN.
Configuration Procedure
Follow these steps to configure an MGV:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter Ethernet interface view
interface interface-type
interface-number
—
Configure an MGV for MAC
authentication
mac-authentication guest-vlan
guest-vlan-id
Required
Not configured by default