mac-authentication domain

Syntax

mac-authentication domain domain-name

undo mac-authentication domain

View

System view, Ethernet interface view

Default level

2: System level

Parameters

domain-name: Specifies an authentication domain name, a case-insensitive string of 1 to 24 characters. The domain name cannot contain any forward slash (/), colon (:), asterisk (*), question mark (?), less-than sign (<), greater-than sign (>), or at sign (@).

Description

Use mac-authentication domain to specify a global authentication domain in system view or a port specific authentication domain in interface view for MAC authentication users.

Use undo mac-authentication domain to restore the default.

By default, the default authentication domain is used for MAC authentication users. For more information about the default authentication domain, see the domain default enable command in "AAA configuration commands."

The global authentication domain is applicable to all MAC authentication enabled ports. A port specific authentication domain is applicable only to the port. You can specify different authentication domains on different ports.

A port chooses an authentication domain for MAC authentication users in this order: port specific domain, global domain, and the default authentication domain.

Related commands: display mac-authentication.

Examples

# Specify the domain1 domain as the global authentication domain for MAC authentication users.

<Sysname> system-view
[Sysname] mac-authentication domain domain1

# Specify the aabbcc domain as the authentication domain for MAC authentication users on port Ethernet 1/0/1.

[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] mac-authentication domain aabbcc