1-11 MAC Address Authentication ConfigurationWhen configuring MAC address authentication, go to these sections for information you are interested:z MAC Address Authentication Overviewz Related Conceptsz Configuring Basic MAC Address Authentication Functionsz MAC Address Authentication Enhanced Function Configurationz Displaying and Maintaining MAC Address Authentication Configurationz MAC Address Authentication Configuration ExamplesMAC Address Authentication OverviewMAC address authentication provides a way for authenticating users based on ports and MACaddresses, without requiring any client software to be installed on the hosts. Once detecting a new MACaddress, it initiates the authentication process. During authentication, the user does not need to enterusername or password manually.For Switch 4500, MAC address authentication can be implemented locally or on a RADIUS server.After determining the authentication method, users can select one of the following types of user nameas required:z MAC address mode, where the MAC address of a user serves as the user name for authentication.z Fixed mode, where user names and passwords are configured on a switch in advance. In this case,the user name, the password, and the limits on the total number of user names are the matchingcriterion for successful authentication. For details, refer to AAA of this manual for information aboutlocal user attributes.Performing MAC Address Authentication on a RADIUS ServerWhen authentications are performed on a RADIUS server, the switch serves as a RADIUS client andcompletes MAC address authentication in combination of the RADIUS server.z In MAC address mode, the switch sends the MAC addresses detected to the RADIUS server asboth the user names and passwords, or sends the MAC addresses detected to the RADIUS serveras the user names and uses the configured fixed password as the password.z In fixed mode, the switch sends the user name and password previously configured for the user tothe RADIUS server for authentication.A user can access a network upon passing the authentication performed by the RADIUS server.Performing MAC Address Authentication LocallyWhen authentications are performed locally, users are authenticated by switches. In this case,z In MAC address mode, the local user name to be configured is the MAC address of an access user,while the password may be the MAC address of the user or the fixed password configured (which isused depends on your configuration). Hyphens must or must not be included depending on the
