Specifying A Mac Authentication Domain; Configuring A Mac Authentication Guest Vlan - HP 3600 v2 Series Configuration Manual
Hide thumbs
Also See for 3600 v2 Series:
- Command reference manual (510 pages) ,
- Configuration manual (441 pages) ,
- Security configuration manual (398 pages)
Table of Contents
Advertisement
Step
2.
Enable MAC authentication.
3.
Set the maximum number of
concurrent MAC authentication
users allowed on a port.
NOTE:
You cannot add a MAC authentication enabled port in to a link aggregation group or service loopback
group, or enable MAC authentication on a port already in a link aggregation group or service loopback
group.
Specifying a MAC authentication domain
By default, MAC authentication users are in the system default authentication domain. To implement
different access policies for users, you can specify authentication domains for MAC authentication users
in the following ways:
Specify a global authentication domain in system view. This domain setting applies to all ports.
•
Specify an authentication domain for an individual port in Ethernet interface view.
•
MAC authentication chooses an authentication domain for users on a port in this order: the
interface-specific domain, the global domain, and the default domain. For more information about
authentication domains, see
To specify an authentication domain for MAC authentication users:
Step
1.
Enter system view.
Specify an authentication
2.
domain for MAC
authentication users.
Configuring a MAC authentication guest VLAN
Follow the guidelines in
Command
•
In system view:
mac-authentication interface
interface-list
•
In interface view:
a.
b.
mac-authentication max-user
user-number
"Configuring
AAA."
Command
system-view
•
In system view:
mac-authentication domain
domain-name
•
In interface view:
a.
interface interface-type
interface-number
b.
mac-authentication domain
domain-name
Table 10
when configuring a MAC authentication guest VLAN on a port.
112
interface interface-type
interface-number
mac-authentication
Remarks
Disabled by default.
Enable MAC authentication for
ports in bulk in system view or an
individual port in Ethernet
interface view.
Optional.
By default, the maximum number
of concurrent MAC
authentication users is 2048.
Remarks
N/A
Use either method.
By default, the system default
authentication domain is used for
MAC authentication users.
Advertisement
Table of Contents
Troubleshooting
