3Com S7906E - Switch, Руководство по настройке

Страница: 1916 / 2621

1-8
Offline detect period is 180s
Quiet period is 180s.
Server response timeout value is 100s
The max allowed user number is 2048 per slot
Current user number amounts to 1
Current domain is 2000
Silent Mac User info:
MAC ADDR From Port Port Index
GigabitEthernet2/0/1 is link-up
MAC address authentication is enabled
Authenticate success: 1, failed: 0
Max number of on-line users is 1024
Current online user number is 1
MAC Addr Authenticate state Auth Index
00e0-fc12-3456 MAC_AUTHENTICATOR_SUCCESS 29
<Device> display connection
Slot: 2
Index=29 ,Username=aaa@2000
IP=N/A
MAC=00e0-fc12-3456
Total 1 connection(s) matched on slot 2.
Total 1 connection(s) matched.
ACL Assignment Configuration Example
Network requirements
As shown in Figure 1-3 , a host is connected to port GigabitEthernet 2/0/1 of the switch and must pass
MAC authentication to access the Internet.
z
Specify to use the MAC address of a user as the username and password for MAC authentication
of the user.
z
Configure the RADIUS server to assign ACL 3000.
z
On port GigabitEthernet 2/0/1 of the switch, enable MAC authentication and configure ACL 3000.
After the host passes MAC authentication, the RADIUS server assigns ACL 3000 to port
GigabitEthernet 2/0/1 of the switch. As a result, the host can access the Internet but cannot access the
FTP server, whose IP address is 10.0.0.1.