R211x-HP Flexfabric 11900 Security Configuration Guide

103
# Use MAC-based accounts for MAC authentication, and each MAC address must be hyphenated
and in upper case.
[Device] mac-authentication user-name-format mac-address with-hyphen uppercase
# Specify the MAC authentication domain.
[Device] mac-authentication domain sun
# Set the 802.1X authentication method to CHAP. By default, the authentication method for
802.1X is CHAP.
[Device] dot1x authentication-method chap
# Set port security's limit on the number of MAC addresses to 64 on the port.
[Device] interface ten-gigabitethernet 1/0/1
[Device-Ten-GigabitEthernet1/0/1] port-security max-mac-count 64
# Set the port security mode to macAddressElseUserLoginSecure.
[Device-Ten-GigabitEthernet1/0/1] port-security port-mode
mac-else-userlogin-secure
# Set the NTK mode of the port to ntkonly.
[Device-Ten-GigabitEthernet1/0/1] port-security ntk-mode ntkonly
[Device-Ten-GigabitEthernet1/0/1] quit
Verifying the configuration
# Display the port security configuration.
[Device] display port-security interface ten-gigabitethernet 1/0/1
Port security is enabled globally
AutoLearn aging time is 0 minutes
Disableport Timeout: 20s
OUI value:
Ten-GigabitEthernet1/0/1 is link-up
Port mode: macAddressElseUserLoginSecure
NeedToKnow mode: NeedToKnowOnly
Intrusion protection mode: NoAction
Max number of secure MAC addresses: 64
Current number of secure MAC addresses: 0
Authorization is permitted
After users pass authentication, you can use the following commands to display the user authentication
information on the port:
# Display MAC authentication information.
[Device] display mac-authentication interface ten-gigabitethernet 1/0/1
MAC address authentication is enabled
User name format is MAC address in uppercase, like XX-XX-XX-XX-XX-XX
Fixed username: mac
Fixed password: Not configured
Offline detect period is 60s
Quiet period is 5s
Server response timeout value is 100s
Max number of users is 2048 per slot
Current number of online users is 3
Current authentication domain is sun