R2511-HP MSR Router Series Security Command Reference(V5)

149
number must be greater than the start port number. A port range defined without the to interface-type
interface-number option comprises only one port.
The following matrix shows the option and router compatibility:
Option MSR900 MSR93X
MSR20-1
X
MSR20 MSR30 MSR50 MSR1000
interface
interface-list
Yes No Yes Yes Yes Yes No
Usage guidelines
To use MAC authentication on a port, you must enable the function both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
Mac-auth is enabled globally.
# Enable MAC authentication on port Ethernet 1/1.
<Sysname> system-view
[Sysname] mac-authentication interface Ethernet 1/1
Mac-auth is enabled on port Ethernet1/1.
Or
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] mac-authentication
Mac-auth is enabled on port Ethernet1/1.
mac-authentication domain
Use mac-authentication domain to specify a global authentication domain in system view or a port
specific authentication domain in interface view for MAC authentication users.
Use undo mac-authentication domain to restore the default.
Syntax
mac-authentication domain domain-name
undo mac-authentication domain
Default
The default authentication domain is used for MAC authentication users. For more information about the
default authentication domain, see the domain default enable command in "AAA configuration
commands."
Views
System view, interface view
Default command level
2: System level