3Com Switch 7750 Configuration Guide

238 CHAPTER 29: CENTRALIZED MAC ADDRESS AUTHENTICATION CONFIGURATION
■ In MAC address mode, MAC address of user authenticated by RADIUS server
need to be configured as both user name and password on the RADIUS server.
Network requirement
As shown in the following figure, a user workstation (Supplicant) is connected
with Ethernet 2/0/1 of the Ethernet device (Authenticator).
The device administrator intends to perform
■ The device administrator intends to control users to access the internet by
performing MAC address authentication on all ports of the device.
■ The device tests whether the user is offline every 180 seconds. And when the
user authentication fails, the device waits for 30 seconds before it
authenticates the user again.
■ All users belong to domain aabbcc.net, adopting the local authentication
mode. The user name and password are both 000fe2010101.
Network diagram
Figure 59 Enable to perform the MAC address authentication locally for access users
Configuration Procedure
# Add a local access user.
<SW7750> system-view
[SW7750] local-user 000fe2010101
[SW7750-luser-000fe2010101] password simple 000fe2010101
[SW7750-luser-000fe2010101] service-type lan-access
[SW7750-luser-000fe2010101] quit
# Configure the ISP domain, and use the local authentication mode.
[SW7750] domain aabbcc.net
[SW7750-isp-aabbcc.net] authentication lan-access local
[SW7750-isp-aabbcc.net] quit
# Enable the MAC address authentication function globally.
[SW7750] mac-authentication
# Enable MAC address authentication for the specified port Ethernet 2/0/1.
[SW7750] mac-authentication interface Ethernet 2/0/1
# Configure MAC address authentication users to use the ISP domain aabbcc.net.
[SW7750] mac-authentication domain aabbcc.net
# Configure MAC address authentication timers.
IP network
Eth2/0/1
Switch
Supplicant
Authenticator
Host