3Com Switch 4200G Configuration Guide

Displaying and Debugging Centralized MAC Address Authentication 193
Configuring the ISP
Domain for MAC
Address Authentication
Users
Table 159 lists the operations to configure the ISP domain for centralized MAC
address authentication users.
Configuring the Timers
Used in Centralized MAC
Address Authentication
The following timers are used in centralized MAC address authentication:
■ Offline detect timer, which sets the time interval for a switch to test whether a user
goes offline. Upon detecting a user is offline, a switch notifies the RADIUS server
of the user to trigger the RADIUS server to stop the accounting on the user.
■ Quiet timer, which sets the quiet period for a switch. After a user fails to pass the
authentication performed by a switch, the switch quiets for a specific period (the
quiet period) before it authenticates users again.
■ Server timeout timer. During authentication, the switch prohibits the user from
accessing the network through the corresponding port if the connection between
the switch and RADIUS server times out.
Table 160 lists the operations to configure the timers used in centralized MAC address
authentication.
Displaying and
Debugging
Centralized MAC
Address
Authentication
After the above configuration, you can execute the display command in any view to
display system running of centralized MAC address authentication configuration, and
to verify the effect of the configuration.
Table 159 Configure the ISP domain for MAC address authentication users
Operation Command Description
Enter system view system-view —
Configure the ISP
domain for MAC
address authentication
users
mac-authentication domain
isp-name
Required
By default, the default domain is
used as the ISP domain.
Table 160 Configure the timers used in centralized MAC address authentication
Operation Command Description
Enter system view system-view
Configure a timer used
in centralized MAC
address authentication
mac-authentication timer
{ offline-detect
offline-detect-value | quiet
quiet-value | server-timeout
server-timeout-value }
Optional
The defaults of the timers used in
centralized MAC address
authentication are as follows:
Offline- detect timer: 300 seconds
Quiet timer: 1 minute
Server timeout timer: 100 seconds
Table 161 Display and debug centralized MAC address authentication
Operation Command Description
Display global or port
information about
centralized MAC
address authentication
display mac-authentication [
interface interface-list ]
This command can be executed in
any view.