H3C S3100 Series, Руководство по эксплуатации

Страница: 458 / 1057

1-3
Operation Command Remarks
Set the user
name in fixed
mode for MAC
authentication
mac-authentication
authmode usernamefixed
Configure the
user name mac-authentication
authusername username
Set the user name in
fixed mode for MAC
authentication
Configure the
password mac-authentication
authpassword password
Optional
By default, the user name
is “mac” and no password
is configured.
Specify an ISP
domain for MAC
authentication
mac-authentication domain isp-name
Required
By default, no ISP domain
is specified and the default
domain is used.
Configure the MAC
authentication timers
mac-authentication timer { offline-detect
offline-detect-value | quiet quiet-value |
server-timeout server-timeout-value }
Optional
The default timeout values
are as follows:
300 seconds for offline
detect timer;
60 seconds for quiet timer;
and
100 seconds for server
timeout timer
Enter Ethernet
interface view
interface interface-type interface-number
—
Set the offline detect
timer for MAC
authentication on the
Ethernet port view
mac-authentication timer offline-detect
offline-detect-value
Optional
300 seconds for offline
detect timer by default
z
If MAC authentication is enabled on a port, you cannot configure the maximum number of dynamic
MAC address entries for that port (through the mac-address max-mac-count command), and
vice versa.
z
If MAC authentication is enabled on a port, you cannot configure port security (through the
port-security enable command) on that port, and vice versa.
z
You can configure MAC authentication on a port before enabling it globally. However, the
configuration will not take effect unless MAC authentication is enabled globally.
z
The offline detect timer configured in system view applies to all MAC authentication-enabled ports.
z
The offline detect timer configured in Ethernet port view applies to the current port only. You can
set the offline detect timer to different values on different Ethernet ports.
z
The offline detect timer configured in Ethernet port view takes precedence over the one configured
in system view.