91MAC authentication configuration examplesBy default, Ethernet, VLAN, and aggregate interfaces are down. To configure these interfaces, use theundo shutdown command to bring them up first.Local MAC authentication configurationNetwork requirementsA supplicant is connected to the device through port GigabitEthernet 3/0/1. See Figure 27.• Local MAC authentication is required on every port to control user access to the Internet.• All users belong to domain aabbcc.net.• Local users use their MAC addresses as the usernames and passwords for authentication.• Set the offline detect timer to 180 seconds and the quiet timer to 3 minutes.Figure 27 Network diagram for local MAC authenticationConfiguration procedure1. Configure MAC authentication on the deviceAdd a local user, setting the username and password as 00-e0-fc-12-34-56, the MAC address ofthe user. system-view[Device] local-user 00-e0-fc-12-34-56[Device-luser-00-e0-fc-12-34-56] password simple 00-e0-fc-12-34-56[Device-luser-00-e0-fc-12-34-56] service-type lan-access[Device-luser-00-e0-fc-12-34-56] quitConfigure ISP domain aabbcc.net, and specify that the users in the domain use localauthentication.[Device] domain aabbcc.net[Device-isp-aabbcc.net] authentication lan-access local[Device-isp-aabbcc.net] quitEnable MAC authentication globally.[Device] mac-authenticationEnable MAC authentication for port GigabitEthernet 3/0/1.[Device] mac-authentication interface gigabitethernet 3/0/1Specify the ISP domain for MAC authentication.
