H3C Technologies H3C S12500-X Series Switches - Manual (Page 116)

104
[Device] mac-authentication user-name-format mac-address with-hyphen uppercase
# Specify the MAC authentication domain.
[Device] mac-authentication domain sun
# Set the 802.1X authentication method to CHAP. (This configuration is optional. By default, the
authentication method is CHAP for 802.1X.)
[Device] dot1x authentication-method chap
# Set port security's limit on the number of MAC addresses to 64 on the port.
[Device] interface ten-gigabitethernet 1/0/1
[Device-Ten-GigabitEthernet1/0/1] port-security max-mac-count 64
# Set the port security mode to macAddressElseUserLoginSecure.
[Device-Ten-GigabitEthernet1/0/1] port-security port-mode
mac-else-userlogin-secure
# Set the NTK mode of the port to ntkonly.
[Device-Ten-GigabitEthernet1/0/1] port-security ntk-mode ntkonly
[Device-Ten-GigabitEthernet1/0/1] quit
436B
Verifying the configuration
# Display the port security configuration.
[Device] display port-security interface ten-gigabitethernet 1/0/1
Port security is enabled globally
AutoLearn aging time is 0 minutes
Disableport Timeout: 20s
OUI value:
Ten-GigabitEthernet1/0/1 is link-up
Port mode: macAddressElseUserLoginSecure
NeedToKnow mode: NeedToKnowOnly
Intrusion protection mode: NoAction
Max number of secure MAC addresses: 64
Current number of secure MAC addresses: 0
Authorization is permitted
After users pass authentication, you can use the following commands to display the user authentication
information on the port:
# Display MAC authentication information.
[Device] display mac-authentication interface ten-gigabitethernet 1/0/1
MAC address authentication is enabled
User name format is MAC address in uppercase, like XX-XX-XX-XX-XX-XX
Fixed username: mac
Fixed password: Not configured
Offline detect period is 60s
Quiet period is 5s
Server response timeout value is 100s
Max number of users is 2048 per slot
Current number of online users is 3
Current authentication domain is sun
Silent MAC user info: