QTech QSW-2800 series, Руководство по настройке

Страница: 342 / 415

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1
328
Chapter 46 MAB Configuration
46.1 Introduction to MAB
In actual network existing the device which can not install the authentication client, such as
printer, PDA devices, they can not process 802.1x authentication. However, to access the
network resources, they need to use MAB authentication to replace 802.1x authentication.
MAB authentication is a network accessing authentication method based on the accessing port
and the MAC address of MAB user. The user needn’t install any authentication client, after the
authentication device receives ARP packets sent by MAB user, it will authenticate the MAC
address of the MAB user and there is the corresponding authentication information in the
authentication server, the matched packets of the port and the source MAC are allowed to
pass when the authentication is successful. MAB user didn’t need to input the username and
password manually in the process of authentication.
At present, MAB authentication device only supports RADIUS authentication method. There is
the selection method for the authentication username and password: use the MAC address of
the MAB user as the username and password, or the fixed username and password (all users
use the configured username and password to authenticate).
46.2 MAB Configuration Task List
MAB Configuration Task List:
1. Enable MAB function
1) Enable global MAB function
2) Enable port MAB function
2. Configure MAB authentication username and password
3. Configure MAB parameters
1) Configure guest-vlan
2) Configure the binding-limit of the port
3) Configure the reauthentication time
4) Configure the offline detection time
5) Configure other parameters
1. Enable MAB function
Command Explanation
Global Mode
mac-authentication-bypass enable Enable the global MAB authentication