mac-authentication enable

Function

The mac-authentication enable command enables MAC address authentication.

The undo mac-authentication command disables MAC address authentication.

By default, MAC address authentication is disabled.

This command is supported only on the NetEngine 8000 F1A.

Format

mac-authentication enable

undo mac-authentication

Parameters

None

Views

AAA domain view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

Usage Scenario

MAC address authentication is used to simplify web authentication. If MAC address authentication is enabled, the user for web authentication only needs to input the user name and password at the first time and the RADIUS server records the user's MAC address. When the user attempts to pass the web authentication again, the RADIUS server performs the authentication based on the users' MAC address and the user does not need to input the user name and password again.

In the existing network, this command is used together with the authening authen-fail online authen-domain <domain-name> command. If the MAC authentication fails, the user can perform the web authentication by inputting the user name and password in the re-direction domain, and then enter the authentication domain and access the network resources.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

# Enable MAC address authentication.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] domain domain1
[*HUAWEI-aaa-domain-domain1] commit
[*HUAWEI-aaa-domain-domain1] mac-authentication enable