z
password configured (which is
the
mac-authentication authmode usernameasmacaddress
In fixed mode, all users’ MAC addresses are automatically mapped to the configured local
rnames.
o be configured as lan-access.
Related Concept
MAC
d
The
on in the process of MAC address authentication:
counting notice to
z
eriod defined by this timer.
z
Server timeout timer: During authentication of a user, if the switch receives no response from the
in this period, it assumes that its connection to the RADIUS server has timed out
Quiet
hen a user fails MAC address authentication, the MAC address becomes a quiet MAC address, which
means that any packets from the MAC address will be discarded simply by the switch until the quiet
This prevents an invalid user from being authenticated repeatedly in a short time.
In MAC address mode, the local user name to be configured is the MAC address of an access user,
while the password may be the MAC address of the user or the fixed
used depends on your configuration). Hyphens must or must not be included depending on the
format configured with
usernameformat
command; otherwise, the authentication will fail.
z
passwords and use
z
The service type of a local user needs t
s
Ad ress Authentication Timers
following timers functi
z
Offline detect timer: At this interval, the switch checks to see whether an online user has gone
offline. Once detecting that a user becomes offline, the switch sends a stop-ac
the RADIUS server.
Quiet timer: Whenever a user fails MAC address authentication, the switch does not initiate any
MAC address authentication of the user during a p
RADIUS server
and forbids the user from accessing the network.
MAC Address
W
timer expires.
If the quiet MAC is the same as the static MAC configured or an authentication-passed MAC, then the
quiet function is not effective.
Configuring Basic MAC Addre
tion Function
F
con
C address authentication functions:
ss Authentica
s
ollow these steps to
figure basic MA
To do...
Use the command...
Remarks
Enter system view
system-view
—
Enable MAC address
mac-authentica
Required
Disabled by default
authentication
globally
tion
Enable MAC address
authentication for the
n interface
In system view
mac-authenticatio
interface-list
Use either method
35-2
