3Com Switch 7750 Configuration Guide Guide

222 CHAPTER 28: CENTRALIZED MAC ADDRESS AUTHENTICATION CONFIGURATION
The device administrator intends to perform
■ The device administrator intends to control users to access the internet by
performing MAC address authentication on all ports of the device.
■ The device tests whether the user is offline every 180 seconds. And when the
user authentication fails, the device waits for 30 seconds before it
authenticates the user again.
■ All users belong to domain aabbcc.net, adopting the local authentication
mode. The user name and password are both 00e0fc010101.
Network diagram
Figure 54 Enable to perform the MAC address authentication locally for access users
Configuration Procedure
# Add a local access user.
<SW7750> system-view
[SW7750] local-user 00e0fc010101
[SW7750-luser-00e0fc010101] password simple 00e0fc010101
[SW7750-luser-00e0fc010101] service-type lan-access
[SW7750-luser-00e0fc010101] quit
# Configure the ISP domain, and use the local authentication mode.
[SW7750] domain aabbcc.net
[SW7750-isp-aabbcc.net] authentication lan-access local
[SW7750-isp-aabbcc.net] quit
# Enable the MAC address authentication function globally.
[SW7750] mac-authentication
# Enable MAC address authentication for the specified port Ethernet 3/0/1.
[SW7750] mac-authentication interface Ethernet 3/0/1
# Configure MAC address authentication users to use the ISP domain aabbcc.net.
[SW7750] mac-authentication domain aabbcc.net
# Configure MAC address authentication timers.
[SW7750] mac-authentication timer offline-detect 180
[SW7750] mac-authentication timer quiet 30
For domain-related configuration, refer to the "802.1x" Configuration Example
part of this manual.
Internet
Supplicant
Authenticator
Device
Internet
Supplicant
Authenticator
Device
Ethernet3/0/1
Internet
Supplicant
Authenticator
Device
Internet
Supplicant
Authenticator
Device
Ethernet3/0/1