SNR S2940-8G-v2, Configuration Manual

Page: 350 / 420

SNR S2940-8G-v2 Switch Configuration Guide
MAB Configuration
Chapter 53
MAB Configuration
53.1 Introduction to MAB
In actual network existing the device which can not install the authentication client, such as printer,
PDA devices, they can not process 802.1x authentication. However, to access the network re-
sources, they need to use MAB authentication to replace 802.1x authentication.
MAB authentication is a network accessing authentication method based on the accessing port
and the MAC address of MAB user. The user needn't install any authentication client, after the au-
thentication device receives ARP packets sent by MAB user, it will authenticate the MAC address
of the MAB user and there is the corresponding authentication information in the authentication
server, the matched packets of the port and the source MAC are allowed to pass when the au-
thentication is successful. MAB user didn't need to input the username and password manually in
the process of authentication.
At present, MAB authentication device only supports RADIUS authentication method. There
is the selection method for the authentication username and password: use the MAC address of
the MAB user as the username and password, or the fixed username and password (all users use
the configured username and password to authenticate).
53.2 MAB Configuration Task List
MAB Configuration Task List:
1. Enable MAB function
(a) Enable global MAB function
(b) Enable port MAB function
2. Configure MAB authentication username and password
3. Configure MAB parameters
(a) Configure guest-vlan
(b) Configure the binding-limit of the port
(c) Configure the reauthentication time
350