1-8# Set the user name in MAC address mode for MAC address authentication, requiring hyphenedlowercase MAC addresses as the usernames and passwords.[Sysname] mac-authentication authmode usernameasmacaddress usernameformat with-hyphenlowercase# Add a local user.z Specify the user name and password.[Sysname] local-user 00-0d-88-f6-44-c1[Sysname-luser-00-0d-88-f6-44-c1] password simple 00-0d-88-f6-44-c1z Set the service type to lan-access.[Sysname-luser-00-0d-88-f6-44-c1] service-type lan-access[Sysname-luser-00-0d-88-f6-44-c1] quit# Add an ISP domain named aabbcc.net.[Sysname] domain aabbcc.netNew Domain added.# Specify to perform local authentication.[Sysname-isp-aabbcc.net] scheme local[Sysname-isp-aabbcc.net] quit# Specify aabbcc.net as the ISP domain for MAC address authentication[Sysname] mac-authentication domain aabbcc.net# Enable MAC address authentication globally (This is usually the last step in configuring access controlrelated features. Otherwise, a user may be denied of access to the networks because of incompleteconfiguaration.)[Sysname] mac-authenticationAfter doing so, your MAC address authentication configuration will take effect immediately. Only userswith the MAC address of 00-0d-88-f6-44-c1 are allowed to access the Internet through portGigabitEthernet 1/0/2.
