H3C SOHO IE4300, Command Reference Manual

Page: 2022 / 3296

30
Parameters
fixed
: Uses a shared account for all MAC authentication users.
account name : Specifies the username for the shared account. The name is a case-sensitive
string of 1 to 55 characters, excluding the at sign (@). If you do not specify a username, the default
name
mac applies.
mac-address
: Uses MAC-based user accounts for MAC authentication users.
with-hyphen
: Includes hyphens in MAC addresses. The MAC addresses use the
xx-xx-xx-xx-xx-xx format or the XX-XX-XX-XX-XX-XX format.
separator colon
: Uses the colon (:) in place of the hyhen (-) as the separator in MAC addresses.
The MAC addresses use the xx:xx:xx:xx:xx:xx format or the XX:XX:XX:XX:XX:XX format. If you do
not specify the colon as the separator, the hypen is used.
without-hyphen
: Excludes hyphens from a MAC address, for example, xxxxxxxxxxxx.
lowercase
: Specifies letters in lower case.
uppercase : Specifies letters in upper case.
password
: Specifies the user password. If you do not specify a password for MAC-based user
accounts, the device uses the MAC address of each user in the specified format as the password. If
you do not specify a password for the shared account, the shared account does not have a
password.
cipher
: Specifies a password in encrypted form.
simple
: Specifies a password in plaintext form. For security purposes, the password specified in
plaintext form will be stored in encrypted form.
string
: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 63 characters. Its
encrypted form is a case-sensitive string of 1 to 117 characters.
Usage guidelines
If you specify the MAC-based user account format, the device uses the MAC address of a user as
the username for MAC authentication of the user. This user account type ensures high
authentication security. However, you must create on the authentication server a user account for
each user, using the MAC address of the user as the username.
If you specify a shared user account, the device uses the specified username and password for MAC
authentication of all users. Because all MAC authentication users use a single account for
authentication, you only need to create one account on the authentication server. This user account
type is suitable for trusted networks.
Examples
# Configure a shared account for all MAC authentication users, and set the username to abc and
password to xyz in plaintext form.
<Sysname> system-view
[Sysname] mac-authentication user-name-format fixed account abc password simple xyz
# Use the MAC address of each user as both the username and password for MAC authentication.
The MAC addresses are in hexadecimal notation with hyphens, and letters are in upper case.
<Sysname> system-view
[Sysname] mac-authentication user-name-format mac-address with-hyphen uppercase
Related commands
display mac-authentication