80Step Command Remarks4. Enable MAC authentication onthe port. mac-authentication By default, MAC authentication isdisabled on a port.Specifying a MAC authentication domainBy default, MAC authentication users are in the system default authentication domain. To implementdifferent access policies for users, you can specify authentication domains for MAC authentication usersin the following ways:• Specify a global authentication domain in system view. This domain setting applies to all portsenabled with MAC authentication.• Specify an authentication domain for an individual port in interface view.MAC authentication chooses an authentication domain for users on a port in this order: the port-specificdomain, the global domain, and the default domain. For more information about authenticationdomains, see "Configuring AAA."To specify an authentication domain for MAC authentication users:Step Command Remarks1. Enter system view. system-view N/A2. Specify an authenticationdomain for MACauthentication users.• In system view:mac-authentication domaindomain-name• In interface view:a. interface interface-typeinterface-numberb. mac-authentication domaindomain-nameUse either method.By default, the system defaultauthentication domain is used forMAC authentication users.Configuring the user account formatTo configure the MAC authentication user account format:Step Command Remarks1. Enter system view. system-view N/A
