Configuring MAC authentication globally

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable MAC authentication globally.

mac-authentication

Disabled by default.

3. Configure MAC authentication timers.

mac-authentication timer { offline-detect offline-detect-value | quiet quiet-value | server-timeout server-timeout-value | guest-vlan-reauth interval }

Optional.

The following default settings apply:

  • The offline detect timer is 300 seconds.

  • The quiet timer is 60 seconds.

  • The server timeout timer is 100 seconds.

  • The MAC re-authentication timer is 30 seconds for users in the MAC authentication guest VLAN.

4. Configure the properties of MAC authentication user accounts.

mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple } password ] | mac-address [ { with-hyphen | without-hyphen } [ lowercase | uppercase ] ] }

Optional.

By default, the username and password for a MAC authentication user account must be a MAC address in lower case without hyphens.


[NOTE: ]

NOTE:

When global MAC authentication is enabled, the EAD fast deployment function cannot take effect.