configure mac address for access internet

It increases security by limiting the devices that can connect to a network.

After the user goes online, you can run the display access-user access-type mac-authen command on the device to check the online MAC address authentication user information.Most broadband routers and other wireless access points contain an optional capability known as MAC address filtering, sometimes known as hardware address filtering.

The user can access the network after the authentication succeeds.

After the user starts the terminal, the device automatically obtains the terminal MAC address and uses it as the user name and password for authentication.

The command output ( MAC address authentication is enabled) shows that MAC address authentication has been enabled on the interface GE 1/0/1.

Run the display mac-authen command to check the MAC address authentication configuration.

You are advised to set the user gateway IP address and its corresponding MAC address as the source IP address and source MAC address of offline detection packets. # (Recommended) Configure the source IP address and source MAC address for offline detection packets in a specified VLAN. authentication mode multi-authen max-user 100 # Enable MAC address authentication on the interface GE 1/0/1.

Configure MAC address authentication on the Switch.

If the user name does not contain the domain name or contains an invalid domain name, the user is authenticated in the default domain. During access authentication, enter a user name in the format to perform AAA authentication in the domain isp1.

# Configure isp1 as the global default domain. # Create an authentication domain isp1, and bind the AAA scheme abc and RADIUS server template rd1 to the domain isp1. # Create an AAA authentication scheme abc and configure the authentication mode to RADIUS.

radius-server shared-key cipher YsHsjx_202206

# Create and configure the RADIUS server template rd1. Create and configure a RADIUS server template, an AAA scheme, and an authentication domain.# On the Switch, configure the interface GE 1/0/2 connected to the RADIUS server as an access interface and add the interface to VLAN 20. In this example, users are added to VLAN 10. Configure the interface type and VLANs based on the site requirements.

Configure mac address for access internet