3Com Switch 7750 Configuration Guide

Displaying and Debugging Centralized MAC Address Authentication 237
n
■ If the MAC address regular re-authentication function is enabled, when the
Reauth-period times out, the device initiates a re-authentication.
■ When you configure to re-authenticate a user with the specified MAC address,
each MAC address re-authentication configuration on the user will trigger a
re-authentication. If re-authentication succeeds, the user will be authorized;
otherwise, the user will be made offline.
■ When you configure to re-authenticate a specified MAC address, if the MAC
address has failed the MAC address authentication, the re-authentication
operation will be ignored.
Displaying and
Debugging
Centralized MAC
Address
Authentication
After the above configuration, you can execute the display command in any view
to display system running of centralized MAC address authentication
configuration, and to verify the effect of the configuration. You can execute the
reset command in user view to clear the statistics of centralized MAC address
authentication.
Centralized MAC
Address
Authentication
Configuration
Example
n
Centralized MAC address authentication configuration is similar to that of 802.1x.
In this example, the differences between the two lie in
■ Centralized MAC address authentication needs to be enabled both globally and
for a port.
■ In MAC address mode, MAC address of locally authenticated user is used as
both user name and password.
Table 168 Configure the centralized MAC address re-authentication function
Operation Command Description
Enter system view system-view -
Enable the MAC address
regular re-authentication
function
mac-authentication
re-authenticate enable
Optional
By default, the MAC address
regular re-authentication
function is disabled.
Configure to re-authenticate
a specified MAC address
mac-authentication
re-authenticate
mac-address mac-address
Optional
Table 169 Display and debug centralized MAC address authentication
Operation Command Description
Display global or port
information about centralized
MAC address authentication
display mac-authentication
[ interface interface-list ]
This command can be
executed in any view.
Clear the statistics of global or
port centralized MAC address
authentication
reset mac-authentication
statistics [ interface
interface-list ]
This command is executed in
user view