H3C Technologies H3C S12500-X Series Switches - Manual (Page 94)

82
Step Command Remarks
4. Enable MAC authentication on
the port.
mac-authentication
By default, MAC authentication is
disabled on a port.
56B
Specifying a MAC authentication domain
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can specify authentication domains for MAC authentication users
in the following ways:
• Specify a global authentication domain in system view. This domain setting applies to all ports
enabled with MAC authentication.
• Specify an authentication domain for an individual port in interface view.
MAC authentication chooses an authentication domain for users on a port in this order: the port-specific
domain, the global domain, and the default domain. For more information about authentication
domains, see "
787H
Configuring AAA ."
To specify an authentication domain for MAC authentication users:
Step Command Remarks
1. Enter system view. system-view N/A
2. Specify an authentication
domain for MAC
authentication users.
• In system view:
mac-authentication domain
domain-name
• In interface view:
a. interface interface-type
interface-number
b. mac-authentication domain
domain-name
Use either method.
By default, the system default
authentication domain is used for
MAC authentication users.
57B
Configuring the user account format
To configure the MAC authentication user account format:
Step Command Remarks
1. Enter system view. system-view N/A