mac-authen permit mac-address

Function

The mac-authen permit mac-address command specifies the MAC address range allowed for MAC address authentication.

The undo mac-authen permit mac-address command deletes the MAC address range allowed for MAC address authentication.

By default, no MAC address range is specified for MAC address authentication.

Format

mac-authen permit mac-address mac-address mask { mask | mask-length }

undo mac-authen permit mac-address mac-address mask { mask | mask-length }

Parameters

Parameter	Description	Value
mac-address	Specifies a MAC address for MAC address authentication.	The value is in H-H-H format. H contains 1 to 4 hexadecimal digits.
mask mask	Specifies the MAC address mask.	The value is in H-H-H format. H contains 1 to 4 hexadecimal digits.
mask mask-length	Specifies the MAC address mask length.	The value is an integer that ranges from 1 to 48.

Views

MAC access profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If a new MAC address entry is generated on the device after MAC address authentication is enabled on a VLANIF interface, MAC address authentication will be performed for the corresponding user. To actually control the users who can be authenticated using MAC addresses on the VLANIF interface, use this command to specify a MAC address range for MAC address authentication.

Precautions

Only MAC address authentication users who go online through VLANIF interfaces support this function.

A maximum of eight MAC address ranges are allowed for MAC address authentication on a VLANIF interface.

Example

# In the MAC access profile m1, set the MAC address to 0002-0002-0002 and the MAC address mask length to 24 for MAC address authentication.

<HUAWEI> system-view
[HUAWEI] mac-access-profile name m1
[HUAWEI-mac-access-profile-m1] mac-authen permit mac-address 0002-0002-0002 mask 24