H3C Technologies H3C Intelligent Management Center - Manual (Page 61)

43
3. Enable MAC address authentication.
Creating a RADIUS scheme
An access device exchanges RADIUS packets with UAM according to the configured RADIUS scheme.
When you configure a RADIUS scheme, follow these guidelines:
• The authentication server IP and the accounting server IP that you specified in the RADIUS scheme
must be the IP address of the UAM server.
• The shared key and authentication/accounting port specified in the RADIUS scheme must be
consistent with those configured for the access device on UAM.
Creating a domain
When you configure a domain, follow these guidelines:
• For MAC authentication, select LAN access as the endpoint authentication function.
• The RADIUS scheme used by the domain must be configured as explained in the previous topic.
Enabling MAC address authentication
1. Enable MAC address authentication globally and on an interface.
2. Specify the domain created in the previous step for MAC address authentication.
Endpoint configuration
The endpoint must use DHCP to obtain its IP address.
If the endpoint is configured with a static IP address, or the endpoint uses a browser to access the network
by the IP address rather than the domain name of the network, the endpoint cannot be redirected to the
account registering page.
Account registering configuration
After passing anonymous MAC authentication, a user who uses a browser to access the network with
domain name is redirected to the account registering page, as shown in Figure 34 .