< Home

mac-authen username (upgrade-compatible command)

Function

The mac-authen username command configures the user name format for MAC address authentication.

The undo mac-authen username restores the default user name format.

By default, the MAC address without hyphens (-) is used as the user name and password for MAC address authentication.

Format

mac-authen username { fixed username [ password cipher password ] | macaddress [ format { with-hyphen | without-hyphen } [ password cipher password ] ] | dhcp-option option-code { circuit-id | remote-id } password cipher password }

undo mac-authen username [ fixed username [ password cipher password ] | macaddress [ format { with-hyphen | without-hyphen } [ password cipher password ] ] | dhcp-option option-code [ password cipher password ] ]

Parameters

Parameter

Description

Value

fixed username

Specifies the fixed user name for MAC address authentication.

The value is a string of 1 to 64 case-sensitive that do not contain spaces and question marks (?).

password cipher password

Specifies the password displayed in cipher text for MAC address authentication.
  • The user with a fixed name can log in without a password if no password is set, which is not recommended.
  • When a MAC address is used as the user name, the MAC address can be used as the password if no password is set. When local authentication is specified in the AAA authentication scheme, you must set a password.
  • If the DHCP option is used as the user name, you must set a password.
NOTE:

If fixed user names are configured in the VLANIF interface view, Eth-Trunk interface view or Port group view, the password must be set.

If a MAC address is configured as the user name in the Port group view, the password cannot be set.

The value is a case-sensitive string without question marks (?) or spaces. The password contains 1 to 128 characters in plain text or 48 to 188 characters in cipher text.

NOTE:

To improve security, it is recommended that the password contains at least two types of lower-case letters, upper-case letters, numerals, and special characters, and contains at least 6 characters.

macaddress

Specifies that the user name in MAC address authentication is the MAC address.

-

format

Specifies the format of the MAC address.

-

with-hyphen

Specifies that the MAC address with hyphens is used as the user name, for example, 0005-e01c-02e3.

-

without-hyphen

Specifies that the MAC address without hyphens is used as the user name, for example, 0005e01c02e3.

-

dhcp-option option-code

Specifies the name of the MAC address authentication user to a specified DHCP option.
  • circuit-id: Specifies the circuit ID in the DHCP Option82 as the user name in MAC address authentication.
  • remote-id: Specifies the remote ID in the DHCP Option82 as the user name in MAC address authentication.
NOTE:
In VLANIF interface view, the parameter does not support.

The value is an integer. In the current version, the value is fixed as 82.

Views

System view, VLANIF interface view, Ethernet interface view, GE interface view, XGE interface view, 40GE interface view, Eth-Trunk interface view, Port group view

Default Level

2: Configuration level

Usage Guidelines

This command is available to aid upgrade compatibility. It can only be run during the configuration restoration phase of the upgrade.

After the upgrade, this command is no longer supported, and it is replaced by the mac-authen username command in the mac access profile view.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >