3Com S7906E - Switch, Руководство по настройке

Страница: 1912 / 2621

1-4
To do… Use the command… Remarks
Configure the username
and password for MAC
authentication
mac-authentication
user-name-format
{ fixed
[ account name ] [ password
{ cipher | simple } password ] |
mac-address [ { with-hyphen |
without-hyphen } [ lowercase |
uppercase ] ] }
Optional
By default, the user’s source
MAC address (in lower case)
with “-” serves as the username
and password.
interface interface-type
interface-number
Set the maximum number
of concurrent MAC
authentication users
allowed on a port
mac-authentication max-user
user-number
Optional
By default, the maximum
number allowed on a port is
1024.
z
You can configure MAC authentication for ports first. However, the configuration takes effect only
after you enable MAC authentication globally.
z
Enabling MAC authentication on a port is mutually exclusive with adding the port to an aggregation
group and adding the port to a service loopback group.
z
For details about the default ISP domain, refer to AAA Configuration in the Security Volume .
Displaying and Maintaining MAC Authentication
To do… Use the command… Remarks
Display the global MAC
authentication information or
the MAC authentication
information about specified
ports
display mac-authentication
[ interface interface-list ]
Available in any view
Clear the MAC authentication
statistics
reset mac-authentication
statistics
[ interface
interface-list ]
Available in user view
MAC Authentication Configuration Examples
Local MAC Authentication Configuration Example
Network requirements
As illustrated in Figure 1-1 , a supplicant is connected to the device through port GigabitEthernet 2/0/1.
z
Local MAC authentication is required on every port to control user access to the Internet.
z
All users belong to domain aabbcc.net.
z
Local users use their MAC addresses as the usernames and passwords for authentication.
z
Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.