MAC Authentication on Interface

You can query, set, and delete MAC address authentication parameters on an interface.

Context

MAC address authentication can be configured on an interface before global MAC address authentication is configured, but does not take effect on the interface. After global MAC address authentication is enabled, MAC address authentication configured on an interface takes effect immediately.

Procedure

Query the configuration of MAC address authentication on an interface.
1. Choose Security > MAC Authen > MAC Authentication on Interface in the navigation tree to open the MAC Authentication on Interface page.
2. Set the search criteria.
3. Click Query to display all matching records.

Configure Interface

Choose Security > MAC Authen > MAC Authentication on Interface in the navigation tree to open the MAC Authentication on Interface page.

Select a record and click Configure. The Configure Interface page is displayed.

Table 1 describes the parameters on the Configure Interface page.

**Table 1** Configure Interface
Parameter	Description
Interface name	Indicates the name of an interface. The interface name cannot be modified. You can select multiple interfaces each time. NOTE: If only one interface is selected, the configuration of the interface is displayed on the Configure Interface page. If multiple interfaces are selected, the default settings of the interfaces are displayed.
MAC authentication	Indicates whether to enable MAC address authentication. The options are Enabled and Disabled. By default, the value is Disabled.
Domain	Indicates the domain for MAC address authentication.
User name format	Indicates a user name format. The options are as follows: MAC Fixed user name By default, the MAC address is used.
MAC	Indicates the format of MAC addresses. The parameter is valid when MAC addresses of users are used as user names. The options are as follows: with-hyphen without-hyphen By default, the value is without-hyphen.
User name	Indicates a user name. The value is valid when the fixed user name is used for MAC address authentication. Fixed user name: All users use the user names and passwords pre-configured on a switch; therefore, whether users can pass authentication depends on correctness of the user names and passwords and the maximum number of users allowed to use the user name.
Password	The value is valid when the fixed user name is used for MAC address authentication. Set the value of this parameter according to the user name format.
Confirm password	Confirms the password. It must be the same as the password.
Max Number of Access Users	Indicates the maximum number of access users on the specified interface enabled with MAC address authentication. If no interface is specified, all interfaces can connect to access users of the same number. NOTE: The value range varies depending on the device type.

Set parameters.
Click OK.

Clear the configuration of MAC address authentication parameters on an interface.
1. Choose Security > MAC Authen > MAC Authentication on Interface in the navigation tree to open the MAC Authentication on Interface page.
2. Select a record that you want to clear and click Clear Configuration.
  NOTE:
  - To select a record, click the check box of the record.
  - To delete records in batches, click the check boxes of the records.
3. Click OK.