mac-authen permit mac-address

Function

The mac-authen permit mac-address command specifies the MAC address range allowed for MAC address authentication.

The undo mac-authen permit mac-address command deletes the MAC address range allowed for MAC address authentication.

By default, no MAC address range is specified for MAC address authentication.

Only S5720-EI, S5720-HI, S5720I-SI, S5720S-SI, S5720-SI, S5735-S, S5735S-S, S5735-S-I, S5730-HI, S5730S-EI, S5730-SI, S5731-H,?S5731S-H, S5731-S, S5731S-S, S6720-HI, S6720-LI, S6720S-LI, S6720S-SI, S6720-SI, S5732-H, S6730-H, S6730S-H, S6730-S, S6730S-S, S6720-EI, and S6720S-EI support this command.

Format

mac-authen permit mac-address mac-address mask { mask | mask-length }

undo mac-authen permit mac-address mac-address mask { mask | mask-length }

Parameters

Parameter	Description	Value
mac-address	Specifies a MAC address for MAC address authentication.	The value is in H-H-H format. H contains 1 to 4 hexadecimal digits.
mask mask	Specifies the MAC address mask.	The value is in H-H-H format. H contains 1 to 4 hexadecimal digits.
mask mask-length	Specifies the MAC address mask length.	The value is an integer that ranges from 1 to 48.

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

By default, any new MAC address is allowed for MAC address authentication after MAC address authentication is enabled on a VLANIF interface. To actually control the users who can be authenticated using MAC addresses on the VLANIF interface, use this command to specify a MAC address range for MAC address authentication.

Example

# Set the MAC address to 1011-1111-1111 and the MAC address mask length to 24 for MAC address authentication.

<HUAWEI> system-view
[HUAWEI] interface Vlanif 10
[HUAWEI-Vlanif10] mac-authen permit mac-address 1011-1111-1111 mask 24