Specifying An Authentication Domain For Mac Authentication Users - HP 3600 v2 Series Security Configuration Manual
Hide thumbs
Also See for 3600 v2 Series:
- Command reference manual (510 pages) ,
- Configuration manual (449 pages) ,
- Installation manual (62 pages)
Table of Contents
Advertisement
To do...
Configure MAC
authentication timers
Configure the properties of
MAC authentication user
accounts
NOTE:
When global MAC authentication is enabled, the EAD fast deployment function cannot take effect.
Configuring MAC authentication on a port
Follow these steps to configure MAC authentication on a port:
To do...
Enter system view
Enable MAC
authentication
Set the maximum number of concurrent
MAC authentication users allowed on
a port
NOTE:
You cannot add a MAC authentication enabled port in to a link aggregation group, or enable MAC
authentication on a port already in a link aggregation group.
Specifying an authentication domain for MAC
authentication users
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can specify authentication domains for MAC authentication users
in the following ways:
Use the command...
mac-authentication timer
{ offline-detect offline-detect-value |
quiet quiet-value | server-timeout
server-timeout-value }
mac-authentication user-name-format
{ fixed [ account name ] [ password
{ cipher | simple } password ] |
mac-address [ { with-hyphen |
without-hyphen } [ lowercase |
uppercase ] ] }
Use the command...
system-view
mac-authentication interface
In system view
interface-list
interface interface-type
interface-number
In Ethernet
interface view
mac-authentication
mac-authentication max-user
user-number
114
Remarks
Optional
By default, the offline detect timer is
300 seconds, the quiet timer is 60
seconds, and the server timeout
timer is 100 seconds.
Optional
By default, the username and
password for a MAC
authentication user account must
be a MAC address in lower case
without hyphens.
Remarks
—
Required
Disabled by default.
Enable MAC authentication for
ports in bulk in system view or an
individual port in Ethernet
interface view.
Optional
By default, the maximum number
of concurrent MAC
authentication users is 2048.
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
