< Home

Data Model

The configuration model file matching the MAC access profile is huawei-nac-mac.yang.

Table 1 Data model

Object

Description

Value

Remarks

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile

Indicates that the object of a request operation (create or modify) is a MAC access profile. It is a root object, which is only used to contain sub-objects and does not have any data meaning.

N/A

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/name

Indicates the name of the created MAC access profile.

The value is a string of 1 to 31 case-sensitive characters, which cannot be configured to - and --. It cannot contain spaces and the following special characters: / \ : * ? " < > | @ ' %.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/password

Specifies the password for a MAC address authentication user and displays the password in cipher text.

The value is a string of case-sensitive characters without spaces. The password is either a plain-text string of 1 to 128 characters or a cipher-text string of 48 to 188 characters.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/user-name-format/fixed-format/user-name

Configures a fixed user name for MAC address authentication.

The value is a string of 1 to 64 case-sensitive characters without spaces.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/user-name-format/mac-address/mac-address-format

Indicates the format of a MAC address.

The value is of the enumerated type:

  • with-hyphen: indicates that the MAC address contains hyphens (-), for example, 0005-e01c-02e3.
  • with-hyphen-normal: indicates that the MAC address contains hyphens (-), for example, 00-05-e0-1c-02-e3.
  • without-hyphen: indicates that the MAC address does not contain hyphens (-), for example, 0005e01c02e3.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/user-name-format/mac-address/letter

Configures a MAC address in uppercase or lowercase format as the user name for MAC address authentication.

The value is of the enumerated type:

  • uppercase: indicates that the MAC address is in uppercase format.
  • lowercase: indicates that the MAC address is in lowercase format.

N/A

/huawei-nac-mac:mac-access/quiet-function/quiet-period

Configures the quiet period for MAC address authentication users who fail to be authenticated.

The value is an integer in the range from 0 to 3600, in seconds.

N/A

/huawei-nac-mac:mac-access/quiet-function/quiet-times

Configures the maximum number of authentication failures within 60 seconds before the device quiets a MAC address authentication user.

The value is an integer in the range from 1 to 10.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/dhcp-option-format

Specifies a specified DHCP option as the user name for MAC address authentication.

The value is of the enumerated type:

  • circuit-id: specifies the circuit ID in the DHCP Option82 as the user name in MAC address authentication.
  • remote-id: specifies the remote ID in the DHCP Option82 as the user name in MAC address authentication.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/get-dhcp-option

Configures the device to send DHCP option information to the authentication server when triggering MAC address authentication through DHCP packets.

The value is an integer. In the current version, the value is fixed as 82.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/mac-re-authenticate/re-authenticate-dhcp-renew

Indicates whether to enable the device to re-authenticate the users when receiving DHCP lease renewal packets from MAC address authentication users.

The value is of the Boolean type:

  • true: enables the function.
  • false: disables the function.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/off-line-dhcp-release

Indicates whether to enable the device to clear user entries when receiving DHCP release packets from MAC address authentication users.

The value is of the Boolean type:

  • true: enables the function.
  • false: disables the function.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/permit-mac/permit-mac-authenticate/mac

Indicates a source MAC address segment allowed for MAC address authentication.

The value is in the format of H-H-H, in which H is a hexadecimal number of 1 to 4 digits.

N/A

/huawei-nac-mac:mac-access/configure-mode/unified-mode/mac-access-profile/permit-mac/permit-mac-authenticate/prefix-length

Indicates the mask of a source MAC address segment allowed for MAC address authentication.

The value is an integer in the range from 1 to 48.

N/A

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
Next topic >