Enabling MAC Address Authentication

Context

The MAC address authentication configuration takes effect on an interface only after MAC address authentication is enabled globally and on the interface.

After MAC address authentication is enabled, if there are online users who log in through MAC address authentication on the interface, disabling MAC address authentication is prohibited.

For MAC address authentication, ensure that the interface type is hybrid when you configure the authorization VLAN.

Only S5720-EI, S5720-HI, S5720I-SI, S5720S-SI, S5720-SI, S5735-S, S5735S-S, S5735-S-I, S5730-HI, S5730S-EI, S5730-SI, S5731-H,?S5731S-H, S5731-S, S5731S-S, S6720-HI, S6720-LI, S6720S-LI, S6720S-SI, S6720-SI, S5732-H, S6730-H, S6730S-H, S6730-S, S6730S-S, S6720-EI, and S6720S-EI support configuration of MAC address authentication on VLANIF interfaces.

Procedure

Run system-view
The system view is displayed.
Run mac-authen
Global MAC address authentication is enabled.

By default, global MAC address authentication is disabled.
Enable MAC address authentication on an interface in the system or interface view.
In the system view:
1. Run mac-authen interface { interface-type interface-number1 [ to interface-number2 ] } &<1-10>
  MAC address authentication is enabled on the interface.
In the interface view:
1. Run interface interface-type interface-number
  The interface view is displayed.
2. Run mac-authen
  MAC address authentication is enabled on the interface.
By default, MAC address authentication is disabled on an interface.