Configuring MAC authentication on a port

MAC authentication is exclusive with link aggregation group:

You cannot enable MAC authentication on a port already in a link aggregation group.
You cannot add a MAC authentication-enabled port to a link aggregation group.

To configure MAC authentication on a port:

Step	Command	Remarks
1. Enter system view.	system-view	N/A
2. Enable MAC authentication.	(Approach 1) In system view:mac-authentication interface interface-list (Approach 2) In Layer 2 Ethernet interface view: interface interface-type interface-number mac-authentication	Use either approach. Disabled by default. Enable MAC authentication for ports in bulk in system view or an individual port in Layer 2 Ethernet interface view.
3. Set the maximum number of concurrent MAC authentication users allowed on a port.	mac-authentication max-user user-number	Optional. The default is 2048.

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable MAC authentication.

(Approach 1) In system view:mac-authentication interface interface-list
(Approach 2) In Layer 2 Ethernet interface view:
1. interface interface-type interface-number
2. mac-authentication

Use either approach.

Disabled by default.

Enable MAC authentication for ports in bulk in system view or an individual port in Layer 2 Ethernet interface view.

3. Set the maximum number of concurrent MAC authentication users allowed on a port.

mac-authentication max-user user-number

Optional.

The default is 2048.

NOTE:

When both (and only both) 802.1X and MAC authentication are enabled on a port, the device performs 802.1X authentication for 802.1X users that first access the network from the port. Non-802.1X packets trigger MAC authentication.

prev	up	next
Configuring MAC authentication globally	home	Specifying a MAC authentication domain