79For more information about configuring local authentication and RADIUS authentication, see"Configuring AAA."Configuration prerequisitesBefore you configure MAC authentication, complete the following tasks:1. Configure an ISP domain and specify an AAA method. For more information, see "ConfiguringAAA."{ For local authentication, you must also create local user accounts (including usernames andpasswords), and specify the lan-access service for local users.{ For RADIUS authentication, make sure the device and the RADIUS server can reach each other,and create user accounts on the RADIUS server. If you are using MAC-based accounts, makesure the username and password for each account are the same as the MAC address of eachMAC authentication user.2. Make sure the port security feature is disabled. For more information about port security, see"Configuring port security."Configuration task listTasks at a glance(Required.) Enabling MAC authentication(Optional.) Specifying a MAC authentication domain(Optional.) Configuring the user account format(Optional.) Configuring MAC authentication timers(Optional.) Set the maximum number of concurrent MAC authentication users on the portEnabling MAC authenticationYou cannot enable MAC authentication on a port already in a link aggregation group or a serviceloopback group, or add a MAC authentication enabled port to a link aggregation group or a serviceloopback group.For MAC authentication to take effect on a port, you must enable it globally and on the port.To enable MAC authentication:Step Command Remarks1. Enter system view. system-view N/A2. Enable MAC authenticationglobally. mac-authentication By default, MAC authentication isdisabled globally.3. Enter interface view. interface interface-typeinterface-number N/A
