3Com Switch 8800 Advanced Software V5 Configuration Guide

Displaying and Maintaining MAC Authentication 983
c
CAUTION:
■ You can configure MAC authentication on a specific port before global MAC
authentication is enabled, but the configuration will not take effect until global
MAC authentication is enabled.
■ MAC authentication and 802.1x cannot be enabled on the same port.
■ You can neither add a MAC authentication enabled port into an aggregation
group, nor enable MAC authentication on a port added into an aggregation
group.
Displaying and
Maintaining MAC
Authentication
MAC Authentication
Configuration
Example
Network requirements
As illustrated in Figure 295, a supplicant is connected to the Ethernet switch
through port GigabitEthernet 3/1/1.
■ MAC authentication is required on every port to control user access to the
Internet.
■ Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.
■ All users belong to domain aabbcc.net. 00e0fc010101 is used as the user
name and password for local authentication.
Network Diagram
Figure 295 Network diagram for MAC authentication
Configuration Procedure
# Add a local user.
Set the server timeout
timer
mac-authentication timer
server-timeout
server-timeout-value
Optional
Timeout timer for the
connection to the RADIUS
server
100 seconds by default
To do... Use the command... Remarks
To do... Use the command... Remarks
Display the global MAC
authentication information or
the MAC authentication
information about specified
ports
display mac-authentication
[ interface interface-list ]
Available in any view
Display user connection
information
display connection Available in any view
Clear the MAC authentication
statistics
reset mac-authentication
statistics
Available in user view
IP network
GE3/1/1
Switch
Supplicant
Authenticator
Host