R3303-HP HSR6800 Routers Security Command Reference

142
Default command level
2: System level
Parameters
interface interface-list: Specifies an Ethernet port list, in the format of { interface-type interface-number
[ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10
port ranges. The start port and end port of a port range must be of the same type and the end port
number must be greater than the start port number. A port range defined without the to interface-type
interface-number portion comprises only one port.
Usage guidelines
To use MAC authentication on a port, you must enable the function both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
Mac-auth is enabled globally.
# Enable MAC authentication on port GigabitEthernet 3/0/1.
<Sysname> system-view
[Sysname] mac-authentication interface gigabitethernet 3/0/1
Mac-auth is enabled on port GigabitEthernet3/0/1.
Or
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1] mac-authentication
Mac-auth is enabled on port GigabitEthernet3/0/1.
mac-authentication domain
Use mac-authentication domain to specify a global authentication domain in system view or a port
specific authentication domain in interface view for MAC authentication users.
Use undo mac-authentication domain to restore the default.
Syntax
mac-authentication domain domain-name
undo mac-authentication domain
Default
The default authentication domain is used for MAC authentication users. For more information about the
default authentication domain, see the domain default enable command in "AAA configuration
commands."
Views
System view, interface view
Default command level
2: System level