1-4To do… Use the command… RemarksMAC authentication The default ISP domain is used bydefault.Set the offline detect timer mac-authentication timeroffline-detect offline-detect-valueOptional300 seconds by defaultSet the quiet timer mac-authentication timer quietquiet-valueOptional60 seconds by defaultSet the server timeout timer mac-authentication timerserver-timeout server-timeout-valueOptional100 seconds by defaultConfigure the username andpassword for MACauthenticationmac-authenticationuser-name-format { fixed [ accountname ] [ password { cipher | simple }password ] | mac-address[ with-hyphen | without-hyphen ] }OptionalBy default, the user’s source MACaddress serves as the usernameand password, with “-“ in the MACaddress.z You can configure MAC authentication for ports first. However, the configuration takes effect onlyafter you enable MAC authentication globally.z Enabling MAC authentication on a port is mutually exclusive with adding the port to an aggregationgroup.z For details about the default ISP domain, refer to AAA Configuration in the Security Volume.Configuring a Guest VLANConfiguration Prerequisitesz Enable MAC authentication.z Enable MAC VLAN on the port.z Create the VLAN to be specified as the guest VLAN.Configuration ProcedureFollow these steps to configure an MGV:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet interface view interface interface-typeinterface-number —Configure an MGV for MACauthenticationmac-authentication guest-vlanguest-vlan-idRequiredNot configured by default
