HP A5830 Series, Руководство по настройке

Страница: 107 / 280

99
To do… Use the command… Remarks
4. Configure the properties
of MAC authentication
user accounts.
mac-authentication user-name-format
{ fixed [ account name ] [ password {
cipher | simple } password ] | mac-
address [ { with-hyphen | without-
hyphen
} [
lowercase
|
uppercase
] ] }
Optional.
By default, the username and
password for a MAC
authentication user account must
be a MAC address in lowercase
characters without hyphens.
When global MAC authentication is enabled, the EAD fast deployment function cannot take effect.
Configuring MAC authentication on a port
To do… Use the command… Remarks
1. Enter system view.
system-view —
2. Enable MAC
authentication.
In system view
mac-authentication interface
interface-list
Required.
Disabled by default.
Enable MAC authentication for
ports in bulk in system view or
an individual port in Ethernet
interface view.
In Ethernet
interface view
interface interface-type interface-
number
mac-authentication
3. Set the maximum number of
concurrent MAC authentication
users allowed on a port.
mac-authentication max-user
user-number
Optional.
By default, the maximum
number of concurrent MAC
authentication users is 1024.
You cannot add a MAC authentication enabled port in to a link aggregation group or enable MAC
authentication on a port already in a link aggregation group.
Specifying an authentication domain for MAC
authentication users
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can specify authentication domains for MAC authentication users
in the following ways:
•
Specify a global authentication domain in system view. This domain setting applies to all ports.
•
Specify an authentication domain for an individual port in Ethernet interface view.
MAC authentication chooses an authentication domain for users on a port in this order: the interface-
specific domain, the global domain, and the default domain. For more information about authentication
domains, see "
3
Configuring AAA ."
To specify an authentication domain for MAC authentication users:
To do… Use the command… Remarks
1. Enter system view.
system-view —
2. Specify an authentication
domain for MAC mac-authentication domain domain-
name
Required