Configuring MAC authentication globally

MAC authentication can take effect on a port only when it is enabled globally and on the port.

To configure MAC authentication globally:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable MAC authentication globally.

mac-authentication

Disabled by default.

3. Configure MAC authentication timers.

mac-authentication timer { offline-detect offline-detect-value | quiet quiet-value | server-timeout server-timeout-value }

Optional.

By default, the offline detect timer is 300 seconds, the quiet timer is 60 seconds, and the server timeout timer is 100 seconds.

4. Configure the properties of MAC authentication user accounts.

mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple } password ] | mac-address [ { with-hyphen | without-hyphen } [ lowercase | uppercase ] ] }

Optional.

By default, the switch uses the source MAC address of a user as the username and password for MAC authentication, and the MAC address is unhyphenated and in lower case.


[NOTE: ]

NOTE:

When global MAC authentication is enabled, the EAD fast deployment function cannot take effect.