Configuring MAC authentication globally
MAC authentication can take effect on a port only when it is enabled globally and on the port.
To configure MAC authentication globally:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enable MAC authentication globally. | mac-authentication | Disabled by default. |
3. Configure MAC authentication timers. | mac-authentication timer { offline-detect offline-detect-value | quiet quiet-value | server-timeout server-timeout-value } | Optional. By default, the offline detect timer is 300 seconds, the quiet timer is 60 seconds, and the server timeout timer is 100 seconds. |
4. Configure the properties of MAC authentication user accounts. | mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple } password ] | mac-address [ { with-hyphen | without-hyphen } [ lowercase | uppercase ] ] } | Optional. By default, the switch uses the source MAC address of a user as the username and password for MAC authentication, and the MAC address is unhyphenated and in lower case. |
NOTE: When global MAC authentication is enabled, the EAD fast deployment function cannot take effect. | ||