authentication trigger-condition dhcp dhcp-option

Function

The authentication trigger-condition dhcp dhcp-option command enables the device to send DHCP option information to the authentication server when triggering MAC address authentication through DHCP packets.

The undo authentication trigger-condition dhcp dhcp-option command restores the default configuration.

By default, the device does not send DHCP option information to the authentication server when triggering MAC address authentication through DHCP packets.

Format

authentication trigger-condition dhcp dhcp-option option-code

undo authentication trigger-condition dhcp dhcp-option option-code

Parameters

Parameter	Description	Value
option-code	Specifies the option that the device sends to the authentication server.	The value is fixed as 82.

Views

MAC access profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Option82 records information about DHCP user locations and services (voice and data services). After this command is run, if the device can trigger MAC address authentication though DHCP packets, it sends Option82 information to the authentication server when triggering MAC address authentication through DHCP packets. Based on the user information recorded in Option82, the authentication server then assigns different network access rights to users with different services in different locations. This implements accurate control on the network access rights of each user.

Precautions

MAC address authentication users who go online through VLANIF interfaces do not support this function.
This function takes effect only for users who go online after this function is successfully configured.
Only wired users support MAC address authentication triggered by DHCP/ARP/DHCPv6/ND/any packets. For wireless users, MAC address authentication is triggered by association packets.

Example

# In the MAC access profile m1, enable the device to send Option82 information to the authentication server when triggering MAC address authentication through DHCP packets.

<HUAWEI> system-view
[HUAWEI] mac-access-profile name m1
[HUAWEI-mac-access-profile-m1] authentication trigger-condition dhcp dhcp-option 82