Operation Manual – MAC Address AuthenticationH3C S3100 Series Ethernet Switches Chapter 1 MAC Authentication Configuration1-9Operation Command DescriptionClear the statistics ofglobal or on-port MACauthenticationresetmac-authenticationstatistics [ interfaceinterface-typeinterface-number ]Available in user view1.6 MAC Authentication Configuration ExampleI. Network requirementsAs illustrated in Figure 1-1, a supplicant is connected to the switch through portEthernet 1/0/2.z MAC authentication is required on port Ethernet 1/0/2 to control user access to theInternet.z All users belong to domain aabbcc.net. The authentication performed is locallyand the MAC address of the PC (00-0d-88-f6-44-c1) is used as both the username and password.II. Network DiagramFigure 1-1 Network diagram for MAC authentication configurationIII. Configuration Procedure# Enable MAC authentication on port Ethernet 1/0/2. system-view[Sysname] mac-authentication interface Ethernet 1/0/2# Set the user name in MAC address mode for MAC authentication, requiringhyphened lowercase MAC addresses as the usernames and passwords.[Sysname] mac-authentication authmode usernameasmacaddress usernameformatwith-hyphen lowercase# Add a local user.z Specify the user name and password.[Sysname] local-user 00-0d-88-f6-44-c1[Sysname-luser-00-0d-88-f6-44-c1] password simple 00-0d-88-f6-44-c1z Set the service type to “lan-access”.[Sysname-luser-00-0d-88-f6-44-c1] service-type lan-access
