Operation Manual – Centralized MAC Address Authentication
Quidway S3100 Series Ethernet Switches
Chapter 1 Centralized MAC Address
Authentication Configuration
Huawei Technologies Proprietary
1-5
to verify the effect of the configuration. Execute the reset command in user view to
clear centralized MAC address authentication statistics.
Table 1-6 Display and debug centralized MAC address authentication
Operation Command
Display global or port information about
centralized MAC address
authentication
display mac-authentication [ interface
interface-list ]
Clear centralized MAC address
authentication statistics
reset mac-authentication statistics
[ interface interface-type
interface-number ]
1.4 Centralized MAC Address Authentication Configuration
Example
 Note:
Centralized MAC address authentication configuration is similar to 802.1x. In this
example, the differences between the two lie in the following:
z Centralized MAC address authentication needs to be enabled both globally and for
port.
z In MAC address mode, Mac address of locally authenticated user is used as both
user name and password.
z In MAC address mode, MAC address of user authenticated by RADIUS server need
to be configured as both user name and password on the RADIUS server.
The following section describes how to enable centralized MAC address authentication
globally and for a port, and how to configure a local user. For other related configuration,
refer to the configuration examples in Chapter 11 802.1x Configuration.
# Enable centralized MAC address authentication for Ethernet 1/0/2 port.
<Quidway> system-view
[Quidway] mac-authentication interface Ethernet 1/0/2
# Configure centralized MAC address authentication mode as MAC address mode.
[Quidway] mac-authentication authmode usernameasmacaddress
# Add a local user.
z Configure the user name and password.
[Quidway] local-user 00-e0-fc-01-01-01
[Quidway-luser-00-e0-fc-01-01-01] password simple 00-e0-fc-01-01-01
To Next Page
Loading...
Need help?
General