5-3z For RADIUS authentication, ensure that a route is available between the device and the RADIUSserver, and add the usernames and passwords on the server.When adding usernames and passwords on the device or server, ensure that:z The type of username and password must be consistent with that used for MAC authentication.z All the letters in the MAC address to be used as the username and password must be in lowercase.z The service type of the local users must be configured as lan-access.Configuration ProcedureFollow these steps to configure MAC authentication:To do… Use the command… RemarksEnter system view system-view —Enable MACauthentication globally mac-authentication RequiredDisabled by defaultmac-authentication interfaceinterface-listEnable MACauthentication for specifiedportsinterface interface-typeinterface-numbermac-authenticationquitRequiredUse either approach.Disabled by defaultSpecify the ISP domain forMAC authenticationmac-authentication domainisp-nameOptionalThe default ISP domain is usedby default.Set the offline detect timer mac-authentication timeroffline-detect offline-detect-valueOptional300 seconds by defaultSet the quiet timer mac-authentication timer quietquiet-valueOptional60 seconds by defaultSet the server timeouttimermac-authentication timerserver-timeoutserver-timeout-valueOptional100 seconds by defaultConfigure the usernameand password for MACauthenticationmac-authenticationuser-name-format { fixed[ account name ] [ password{ cipher | simple } password ] |mac-address [ with-hyphen |without-hyphen ] }OptionalBy default, the user’s sourceMAC address serves as theusername and password, with“-“ in the MAC address.
