3Com Switch 7750 Configuration Guide Guide

Displaying and Debugging Centralized MAC Address Authentication 221
n
■ If the MAC address re-authentication function is enabled globally, when the
Reauth-period times out, the device initiates a re-authentication. If disabled
globally, the MAC address re-authentication function will not take effect.
■ You must enable the MAC address re-authentication function globally before
you can re-authenticate a specified MAC address.
■ For a user with the specified MAC address, each MAC address
re-authentication configuration on the user will trigger a re-authentication. If
re-authentication succeeds, the user will be authorized; otherwise, the user will
be made offline.
■ When you re-authenticate a specified MAC address, if the MAC address has
failed the MAC address authentication, the re-authentication operation will be
ignored.
Displaying and
Debugging
Centralized MAC
Address
Authentication
After the above configuration, you can execute the display command in any view
to display system running of centralized MAC address authentication
configuration, and to verify the effect of the configuration. You can execute the
reset command in user view to clear the statistics of centralized MAC address
authentication.
Centralized MAC
Address
Authentication
Configuration
Example
n
Centralized MAC address authentication configuration is similar to that of 802.1x.
In this example, the differences between the two lie in:
■ Centralized MAC address authentication needs to be enabled both globally
and for a port.
■ In MAC address mode, MAC address of locally authenticated user is used as
both user name and password.
■ In MAC address mode, MAC address of user authenticated by RADIUS server
need to be configured as both user name and password on the RADIUS server.
Network requirement
As shown in the following figure, a user workstation (Supplicant) is connected
with Ethernet 3/0/1 of the Ethernet device (Authenticator).
Table 152 Display and debug centralized MAC address authentication
Operation Command Description
Display global or port
information about centralized
MAC address authentication
display mac-authentication
[ interface interface-list ]
This command can be
executed in any view.
Clear the statistics of global or
port centralized MAC address
authentication
reset mac-authentication
statistics [ interface
interface-list ]
This command is executed in
user view