1-8# Add a local user.z Specify the username and password.[device] local-user 00-0d-88-f6-44-c1[device-luser-00-0d-88-f6-44-c1] password simple 00-0d-88-f6-44-c1z Set the service type to “lan-access”.[device-luser-00-0d-88-f6-44-c1] service-type lan-access[device-luser-00-0d-88-f6-44-c1] quit# Add an ISP domain named aabbcc.net.[device] domain aabbcc.netNew Domain added.# Specify to perform local authentication.[device-isp-aabbcc.net] scheme local[device-isp-aabbcc.net] quit# Specify aabbcc.net as the ISP domain for MAC authentication[device] mac-authentication domain aabbcc.net# Enable MAC authentication globally (This is usually the last step in configuring access control relatedfeatures. Otherwise, a user may be denied of access to the networks because of incompleteconfiguaration.)[device] mac-authenticationAfter doing so, your MAC authentication configuration will take effect immediately. Only users with theMAC address of 00-0d-88-f6-44-c1 are allowed to access the Internet through port GigabitEthernet1/0/2.
