< Home

display mac-access-profile configuration

Function

The display mac-access-profile configuration command displays the configuration of a MAC access profile.

Format

display mac-access-profile configuration [ name access-profile-name ]

Parameters

Parameter

Description

Value

name access-profile-name

Displays the configuration of a MAC access profile with a specified name.

If name access-profile-name is not specified, the device displays all the MAC access profiles configured on the device. If name access-profile-name is specified, the device displays the configuration of a specified MAC access profile.

The value must be the name of an existing MAC access profile.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

After configuring a MAC access profile, you can run this command to check whether the configuration is correct.

The name of the compatibility profile converted after an upgrade begins with the at sign (@) and the profile is not counted in the configuration specification.

Example

# Display all the MAC access profiles configured on the device.

<HUAWEI> display mac-access-profile configuration
-------------------------------------------------------------------------------                                                     
 ID             Mac-Access-Profile Name                                                                                           
-------------------------------------------------------------------------------                                                     
 0              mac_access_profile                                                                                                
 1              m1                                                                                                                  
 2              m2                                                                                                                   
 3              m3                                                                                                                   
 4              m4                                                                                                        
-------------------------------------------------------------------------------                                                     
 Total: 5 printed: 5. 
Table 1 Description of the display mac-access-profile configuration command output

Item

Description

ID

MAC access profile ID.

Mac-Access-Profile Name

MAC access profile name.

# Display the configuration of the MAC access profile m1 (the MAC address authentication user configures a password).

<HUAWEI> display mac-access-profile configuration name m1
  Profile Name                 : m1                                             
  Authentication method        : CHAP 
  Username format              : fixed username: a1                             
  Password type                : cipher                                         
  Re-authen                    : Disable                                        
  Trigger condition            : arp dhcp nd dhcpv6                             
  Offline dhcp-release         : Disable                                        
  Re-authen dhcp-renew         : Disable                                      
  Trigger dhcp-bind            : Enable 
  Reauthen Period              : 1800s                                          
  Bound authentication profile : -  

# Display the configuration of the MAC access profile m2 (the MAC address authentication user does not configure a password).

<HUAWEI> display mac-access-profile configuration name m2
  Profile Name                 : m2                                             
  Authentication method        : CHAP 
  Username format              : fixed username: a1                             
  Password                     : not configured 
  Re-authen                    : Disable                                        
  Trigger condition            : arp dhcp nd dhcpv6                             
  Offline dhcp-release         : Disable                                        
  Re-authen dhcp-renew         : Disable                                        
  Trigger dhcp-bind            : Enable 
  Reauthen Period              : 1800s                                          
  Bound authentication profile : -  
Table 2 Description of the display mac-access-profile configuration name command output

Item

Description

Profile Name

MAC access profile name.

Authentication method

Authentication mode for MAC address authentication.

  • CHAP
  • PAP

To configure the authentication mode, run the mac-authen authentication-method command.

Username format

User name format for MAC address authentication.

  • use MAC address without-hyphen as username: A user name is a MAC address that does not contain hyphens (-), for example, 0005e01c02e3.
  • use MAC address with-hyphen as username: A user name is a MAC address that contains hyphens (-) and the hyphens are inserted between every four digits, for example, 0005-e01c-02e3.
  • use MAC address with-hyphen normal as username: A user name is a MAC address that contains hyphens (-) and the hyphens are inserted between every two digits, for example, 00-05-e0-1c-02-e3.
  • use MAC address without-hyphen upper as username: A user name is a MAC address in the uppercase format that does not contain hyphens (-), for example, 0005E01C02E3.
  • use MAC address with-hyphen upper as username: A user name is a MAC address in the uppercase format that contains hyphens (-) and the hyphens are inserted between every four digits, for example, 0005-E01C-02E3.
  • use MAC address with-hyphen normal upper as username: A user name is a MAC address in the uppercase format that contains hyphens (-) and the hyphens are inserted between every two digits, for example, 00-05-E0-1C-02-E3.
  • use MAC address with-hyphen colon as username: A user name is a MAC address that contains colons (:) and the colons are inserted between every four digits, for example, 0005:e01c:02e3.
  • use MAC address with-hyphen normal colon as username: A user name is a MAC address that contains colons (:) and the colons are inserted between every two digits, for example, 00:05:e0:1c:02:e3.
  • use MAC address with-hyphen colon upper as username: A user name is a MAC address in the uppercase format that contains colons (:) and the colons are inserted between every four digits, for example, 0005:E01C:02E3.
  • use MAC address with-hyphen normal colon upper as username: A user name is a MAC address in the uppercase format that contains colons (:) and the colons are inserted between every two digits, for example, 00:05:E0:1C:02:E3.
  • fixed username: The user name is fixed.
  • use option82 as username: The content of the Option 82 field is used as the user name.
  • not configured: The user name format is not configured.

To configure the user name format, run the mac-authen username command.

Password type

Password display mode for MAC address authentication.

  • cipher

To configure the password display mode, run the mac-authen username command.

password

Password of the MAC address authentication user. This field has the following fixed value:
  • not configured: indicates that the MAC address authentication user does not configure a password.

Re-authen

Whether re-authentication for online MAC address authentication users is enabled:
  • Enable: indicates that re-authentication is enabled.
  • Disable: indicates that re-authentication is disabled.

To configure the re-authentication function, run the mac-authen reauthenticate command.

Trigger condition

Packet type that can trigger MAC address authentication.

To configure the packet type, run the authentication trigger-condition command.

Offline dhcp-release

Whether the device is enabled to clear user entries when receiving DHCP release packets from MAC address authentication users.

  • Enable
  • Disable

To configure the function, run the mac-authen offline dhcp-release command.

Re-authen dhcp-renew

Whether the device is enabled to re-authenticate MAC address authentication users when receiving DHCP lease renewal packets from the users.

  • Enable
  • Disable

To configure the function, run the mac-authen reauthenticate dhcp-renew command.

Trigger dhcp-bind

Whether the device is enabled to automatically generate the DHCP snooping binding table after static IP users pass MAC address authentication or when the users are at the pre-connection phase:
  • Enable
  • Disable

To configure the function, run the mac-authen trigger dhcp-binding command.

Reauthen Period

Re-authentication interval for online MAC address authentication users.

To configure the re-authentication interval, run the mac-authen timer reauthenticate-period command.

Bound authentication profile

Authentication profile to which the MAC access profile is bound.

To configure the authentication profile, run the mac-access-profile command.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >