Specifying a MAC authentication domain
About authentication domains for MAC authentication
By default, MAC authentication users are in the system default authentication domain. To implement different access policies for users, you can use one of the following methods to specify authentication domains for MAC authentication users:
Specify a global authentication domain in system view. This domain setting applies to all ports enabled with MAC authentication.
Specify an authentication domain for an individual port in interface view.
MAC authentication chooses an authentication domain for users on a port in this order: the port-specific domain, the global domain, and the default domain. For more information about authentication domains, see "Configuring AAA."
Procedure
Enter system view.
system-view
Specify an authentication domain for MAC authentication users.
In system view:
mac-authentication domain domain-name
In interface view:
interface interface-type interface-number
mac-authentication domain domain-name
By default, the system default authentication domain is used for MAC authentication users.