Configuring MAC Authentication 741Configuring MACAuthenticationConfigurationPrerequisites■ Create and configure an ISP domain.■ For local authentication, create the local users and configure the passwords.■ For RADIUS authentication, ensure that a route is available between the deviceand the RADIUS server.c CAUTION: For local authentication■ The type of username and password of a local user must be consistent withthat used for MAC authentication.■ All the letters in the MAC address to be used as the username and password ofa local user must be in lower case.■ The service type of the local user must be configured as lan-access.Configuration Procedure Follow these steps to configure MAC authentication:n ■ You can configure MAC authentication for various ports in advance. Theconfiguration, however, takes effect only after the global MAC authenticationis enabled.To do… Use the command… RemarksEnter system view system-view -Enable MAC authenticationgloballymac-authentication RequiredDisabled by defaultEnable MAC authenticationfor specified portsmac-authenticationinterface interface-listRequiredDisabled by defaultinterface interface-typeinterface-numbermac-authenticationquitSpecify the ISP domain forMAC authenticationmac-authenticationdomain isp-nameOptionalThe default ISP domain(system) is used by default.Set the offline detect timer mac-authentication timeroffline-detectoffline-detect-valueOptional300 seconds by defaultSet the quiet timer mac-authentication timerquiet quiet-valueOptional60 seconds by defaultSet the server timeout timer mac-authentication timerserver-timeoutserver-timeout-valueOptional100 seconds by defaultConfigure the username andpassword for MACauthenticationmac-authenticationuser-name-format { fixed[ account name ] [ password{ cipher | simple } password ]| mac-address[ with-hyphen |without-hyphen ] }OptionalBy default, the user’s sourceMAC address serves as theusername and password, andthe MAC address does notcontain hyphen “-”.
