1-11 MAC Authentication ConfigurationWhen configuring MAC authentication, go to these sections for information you are interested in:z MAC Authentication Overviewz Related Conceptsz Configuring MAC Authenticationz Displaying and Maintaining MAC Authenticationz MAC Authentication Configuration ExamplesMAC Authentication OverviewMAC authentication provides a way for authenticating users based on ports and MAC addresses. Oncedetecting a new MAC address, the device initiates the authentication process. MAC authenticationrequires neither client software to be installed on the hosts, nor any username or password to beentered by users during authentication.Currently, the device supports two MAC authentication modes: Remote Authentication Dial-In UserService (RADIUS) based MAC authentication and local MAC authentication. For detailed informationabout RADIUS authentication and local authentication, refer to AAA Configuration of the SecurityVolume.MAC authentication supports two types of usernames:z MAC address, where the MAC address of a user serves as both the username and password.z Fixed username, where all users use the same preconfigured username and password forauthentication, regardless of the MAC addresses. Multiple users can be authenticated on the sameport, using the same username and password.RADIUS-Based MAC AuthenticationIn RADIUS-based MAC authentication, the device serves as a RADIUS client and requires a RADIUSserver to cooperate with it.z If the type of username is MAC address, the device forwards a detected MAC address as theusername and password to the RADIUS server for authentication of the user.z If the type of username is fixed username, the device sends the same username and passwordconfigured locally to the RADIUS server for authentication of each user.If the authentication succeeds, the user will be granted permission to access the network resources.Local MAC AuthenticationIn local MAC authentication, the device performs authentication of users locally and different itemsneed to be manually configured for users on the device according to the specified type of username:z If the type of username is MAC address, a local user must be configured for each user on thedevice, using the MAC address of the accessing user as both the username and password.
