R0106-HP MSR Router Series Security Command Reference(V7)

141
Views
System view, Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
To use MAC authentication on a port, you must enable the feature both globally and on the port.
Examples
# Enable MAC authentication globally.
<Sysname> system-view
[Sysname] mac-authentication
# Enable MAC authentication on port GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] mac-authentication
Related commands
display mac-authentication
mac-authentication domain
Use mac-authentication domain to specify a global or port-specific authentication domain.
Use undo mac-authentication domain to restore the default.
Syntax
mac-authentication domain domain-name
undo mac-authentication domain
Default
No authentication domain is specified for MAC authentication users. The system default authentication
domain is used. For more information about the default authentication domain, see the domain default
enable command in "AAA commands."
Views
System view, Ethernet interface view
Predefined user roles
network-admin
Parameters
domain-name: Specifies the name of an ISP domain, a case-insensitive string of 1 to 255 characters.
Usage guidelines
The global authentication domain applies to all MAC authentication-enabled ports. A port-specific
authentication domain applies only to the port. You can specify different authentication domains on
different ports.
A port chooses an authentication domain for MAC authentication users in this order:
1. Authentication domain specified on the port.