domain mac-authen force

Function

The domain mac-authen force command configures a forcible domain for MAC address authentication users.

The undo domain mac-authen force command deletes a configured forcible domain for MAC address authentication users.

By default, no forcible domain is configured for MAC address authentication users.

Format

domain domain-name mac-authen force mac-address mac-address mask mask

undo domain domain-name mac-authen force mac-address mac-address

Parameters

Parameter	Description	Value
domain-name	Specifies the forcible domain name.	The value must be an existing domain name on the device.
mac-address mac-address mask mask	Specifies a MAC address range within which the MAC address authentication users use the forcible domain. mac-address mac-address: specifies the user MAC address. mask mask: specifies the MAC address mask. NOTE: A maximum of 128 MAC address ranges can be specified.	Both the MAC address and mask are in the H-H-H format. Each H is a hexadecimal number of 1 to 4 digits.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can configure a forcible domain for MAC address authentication users within a specified MAC address range in the system view.

Prerequisites

A domain has been created using the domain command.

Precautions

The priorities of the forcible domain, domain carried in the user name, and default domain in different views are as follows in descending order: forcible domain with a specified authentication mode in an authentication profile > forcible domain in an authentication profile > authentication domain carried in the user name > default domain with a specified authentication mode in an authentication profile > default domain in an authentication profile > global default domain. Note that a forcible domain specified for MAC address authentication users within a MAC address range has the highest priority and takes precedence over that configured in an authentication profile.

This function takes effect only for users who go online after this function is successfully configured.

Example

# In the system view, configure the forcible domain huawei for MAC address authentication users within the MAC address range specified using MAC address E024-7F95-7231 and mask FFFF-FFFF-FF00.

<HUAWEI> system-view
[HUAWEI] aaa
[HUAWEI-aaa] domain huawei
[HUAWEI-aaa-domain-huawei] quit
[HUAWEI-aaa] quit
[HUAWEI] domain huawei mac-authen force mac-address e024-7f95-7231 mask ffff-ffff-ff00