Mac Authentication Configuration Task List; Basic Configuration For Mac Authentication; Configuration Prerequisites; Configuration Procedure - HP A5830 Series Configuration Manual

If a user in the guest VLAN passes MAC authentication, the user is removed from the guest VLAN and
can access all authorized network resources. If not, the user is still in the MAC authentication guest
VLAN.
A hybrid port is always assigned to a guest VLAN as an untagged member. After the assignment, do not
re-configure the port as a tagged member in the VLAN.

MAC authentication configuration task list

Task
Basic configuration for MAC
authentication
Specifying an authentication domain for MAC authentication users
Configuring a MAC authentication guest VLAN

Basic configuration for MAC authentication

Configuration prerequisites

Create and configure an authentication domain, also called "an ISP domain."
•
For local authentication, create local user accounts, and specify the lan-access service for the
•
accounts.
For RADIUS authentication, check that the device and the RADIUS server can reach each other, and
•
create user accounts on the RADIUS server.
If you are using MAC-based accounts, make sure that the username and password for each account is
the same as the MAC address of the MAC authentication users.

Configuration procedure

MAC authentication can take effect on a port only when it is enabled globally and on the port.
Configuring MAC authentication globally
To do...
1. Enter system view.
2. Enable MAC
authentication globally.
3. Configure MAC
authentication timers.
Configuring MAC authentication globally
Configuring MAC authentication on a port
Use the command...
system-view
mac-authentication
mac-authentication timer { offline-
detect offline-detect-value | quiet quiet-
value | server-timeout server-timeout-
value }
98
Remarks
Required
Required
Optional
Optional
Remarks
—
Required.
Disabled by default.
Optional.
By default, the offline detect timer
is 300 seconds, the quiet timer is
60 seconds, and the server
timeout timer is 100 seconds.