35
MAC Address Authentication Configuration
Wh n configuring MAC
e
address authentication, go to these sections for information you are interested:
z
MAC Address Authentication Overview
z
Related Concepts
z
Configuring Basic MAC Address Authentication Functions
z
MAC Address Authentication Enhanced Function Configuration
Displaying and Maintaining MAC Address Authentication Configuration
z
z
MAC Address Authentication Configuration Examples
MAC
ient software to be installed on the hosts. Once detecting a new MAC
er
00, MAC address authentication can be implemented locally or on a RADIUS server.
e
z
z
ssword, and the limits on the total number of user names are the matching
criterion for successful authentication. For details, refer to
AAA
of this manual for information about
Perfo
e
com
z
RADIUS server as
ured fixed password as the password.
. For
details, refer to
802.1x and System-Guard Operation
.
tion performed by the RADIUS server.
Perfo
Whe
Address Authentication Overview
MAC address authentication provides a way for authenticating users based on ports and MAC
addresses, without requiring any cl
address, it initiates the authentication process. During authentication, the user does not need to ent
username or password manually.
For Switch 45
Aft r determining the authentication method, users can select one of the following types of user name
as required:
MAC address mode, where the MAC address of a user serves as the user name for authentication.
Fixed mode, where user names and passwords are configured on a switch in advance. In this case,
the user name, the pa
local user attributes.
rming MAC Address Authentication on a RADIUS Server
Wh n authentications are performed on a RADIUS server, the switch serves as a RADIUS client and
pletes MAC address authentication in cooperation with the RADIUS server.
In MAC address mode, the switch sends the MAC addresses detected to the
both the user names and passwords, or sends the MAC addresses detected to the RADIUS server
as the user names and uses the config
z
In fixed mode, the switch sends the user name and password previously configured for the user to
the RADIUS server for authentication.
The RADIUS authentication process is the same as that of the 802.1x PAP authentication method
A user can access a network upon passing the authentica
rming MAC Address Authentication Locally
n authentications are performed locally, users are authenticated by switches. In this case,
35-1
