User Manual

In order to actually use MAC authentication, you need to enable MAC authentication for the entire system as well. (aaa
authentication auth-mac command)
[Example]
Enable the LAN port #1 MAC authentication function.
SWP1(config)#interface ge1
SWP1(config-if)#auth-mac enable
10.3.7 Set MAC address format during MAC authentication
[Syntax]
auth-mac auth-user type case
no auth-mac auth-user
[Parameter]
type : Specify the format
Setting value Format
hyphen xx-xx-xx-xx-xx-xx
colon xx:xx:xx:xx:xx:xx
unformatted xxxxxxxxxxxx
case : Specify upper or lowercase
Setting value Description
lower-case Lower case(a～f)
upper-case Upper case(A～F)
[Initial value]
auth-mac auth-user hyphen lower-case
[Input mode]
global configuration mode
[Description]
Changes the format of the user name and password used for authentication during MAC authentication.
During MAC authentication, the MAC address of the supplicant is used as a user name and password, and a request is sent to
the RADIUS server for authentication.
If this command is executed with the "no" syntax, the setting returns to the default.
[Note]
To use this command, you must enable the port authentication function for the applicable interface. (auth-mac enable
command)
[Example]
Change the MAC address format used for MAC authentication to all uppercase format without hyphens.
SWP1(config)#auth-mac auth-user unformatted upper-case
10.3.8 Set host mode
[Syntax]
auth host-mode mode
no auth host-mode
[Parameter]
mode : Operating mode for port authentication
Command Reference | LAN/SFP port control | 109