User's Manual Part 2


60JadeOSUserManual
MAC authentication will be used together with other authentication ways (WPA,
web‐auth)inusual,alsoitcanbeusedindependently.AfterdetectingMACaddressin
thefirsttime,JadeOSwillenableauthenticationforthisuser.
ConfigurationManagement
ToconfigureMACaddress,usethefollowingsteps:
Step1：ConfigureMACauthenticationprofile
(JadeOS) (config)#aaa authentication mac mac1
(JadeOS) (MAC Authentication Profile "mac1")#server-group sg
(JadeOS) (MAC Authentication Profile "mac1")#default-role post-auth
(JadeOS) (MAC Authentication Profile "mac1")#exit
Step2：ApplyMACauthenticationinAAAprofile 
(JadeOS) (MAC Authentication Profile "mac1")#aaa profile aaa
(JadeOS) (AAA profile "aaa")#authentication-mac mac1
9.6802.1XAuthentication
AuthenticationDescription
802.1 x authentication is an authentication  policy based on port. The purpose of
802.1xauthenticationistodecidewhetheraportisavailable;ifsuccessfullyauthen‐
ticate , the port will allow all the message; if unsuccessfully authenticate, the port
onlyallow802.1xmessage.
ConfiguringSteps
802.1x authentication need to specify radius ser ver and default‐role, examples as
follows:
Step1Configureradiusserver
(JadeOS) (config)#aaa authentication dot1x dot1x1
(JadeOS) (802.1X Authentication Profile "dot1x1")#default-role
post-auth
(JadeOS) (802.1X Authentication Profile "dot1x1")#server-group SG1
(JadeOS) (802.1X Authentication Profile "dot1x")#server-group SG1
(JadeOS) (802.1X Authentication Profile "dot1x")#default-role postauth
Step2Apply802.1xauthenticationinAAAprofile
(JadeOS) (MAC Authentication Profile "mac1")#aaa profile aaa
(JadeOS) (AAA profile "aaa")#authentication-dot1x dot1x1