R0106-HP MSR Router Series Security Command Reference(V7)

146
Examples
# Enable MAC authentication delay on interface GigabitEthernet 2/1/1 and set the delay time to 10
seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] mac-authentication timer auth-delay 10
Related commands
• display mac-authentication
• port-security port-mode
mac-authentication user-name-format
Use mac-authentication user-name-format to configure the type of user accounts for MAC authentication
users.
Use undo mac-authentication user-name-format to restore the default.
Syntax
mac-authentication user-name-format { fixed [ account name ] [ password { cipher | simple } password ]
| mac-address [ { with-hyphen | without-hyphen } [ lowercase | uppercase ] ] }
undo mac-authentication user-name-format
Default
Each user's MAC address is used as the username and password for MAC authentication. A MAC
address is in the hexadecimal notation without hyphens, and letters are in lower case.
Views
System view
Predefined user roles
network-admin
Parameters
fixed: Uses a shared account for all MAC authentication users.
account name: Specifies the username for the shared account. The name takes a case-sensitive string of
1 to 55 characters, excluding the at sign (@). If you do not specify a username, the default name mac
applies.
password: Specifies the password for the shared user account:
cipher: Sets a ciphertext password.
simple: Sets a plaintext password.
password: Specifies the password. This argument is case sensitive.
{ If simple is specified, the password must be a string of 1 to 117 characters.
{ If cipher is specified, the password must be a ciphertext string of 1 to 88 characters.
mac-address: Uses MAC-based user accounts for MAC authentication users. You can also specify the
format of username and password:
• with-hyphen—Includes hyphens in the MAC address, for example xx-xx-xx-xx-xx-xx.
• without-hyphen—Excludes hyphens from the MAC address, for example, xxxxxxxxxxxx.