1-3Configuring MAC AuthenticationConfiguration Prerequisitesz Create and configure an ISP domain.z For local authentication, create the local users and configure the passwords.z For RADIUS authentication, ensure that a route is available between the device and the RADIUSserver, and add the usernames and passwords on the server.When adding usernames and passwords on the device or server, ensure that:z The type of username and password must be consistent with that used for MAC authentication.z The service type of the local users must be configured as lan-access.Configuration ProcedureFollow these steps to configure MAC authentication:To do… Use the command… RemarksEnter system view system-view —Enable MAC authenticationglobally mac-authentication RequiredDisabled by defaultmac-authentication interfaceinterface-listEnable MAC authenticationfor specified portsinterface interface-typeinterface-numbermac-authenticationquitRequiredUse either approach.Disabled by defaultSpecify the ISP domain forMAC authenticationmac-authentication domainisp-nameOptionalThe default ISP domain is usedby default.Set the offline detect timer mac-authentication timeroffline-detect offline-detect-valueOptional300 seconds by defaultSet the quiet timer mac-authentication timer quietquiet-valueOptional60 seconds by defaultSet the server timeouttimermac-authentication timerserver-timeoutserver-timeout-valueOptional100 seconds by default
