S3110交换机配置mac地址认证

参考官方手册：

(1)     配置本地MAC地址认证
# 添加本地接入用户。用户名和密码均为接入用户的MAC地址00-e0-fc-12-34-56，服务类型为lan-access。
<Device> system-view
[Device] local-user 00-e0-fc-12-34-56
[Device-luser-00-e0-fc-12-34-56] password simple 00-e0-fc-12-34-56
[Device-luser-00-e0-fc-12-34-56] service-type lan-access
[Device-luser-00-e0-fc-12-34-56] quit
# 配置ISP域，使用本地认证方法。
[Device] domain ***.***
[Device-isp-***.***] authentication lan-access local
[Device-isp-***.***] quit
# 开启全局MAC地址认证特性。
[Device] mac-authentication
# 开启端口Ethernet1/0/1的MAC地址认证特性。
[Device] mac-authentication interface ethernet 1/0/1
# 配置MAC地址认证用户所使用的ISP域。
[Device] mac-authentication domain ***.***
# 配置MAC地址认证的定时器。
[Device] mac-authentication timer offline-detect 180
[Device] mac-authentication timer quiet 180
# 配置MAC地址认证用户名格式：使用带连字符的MAC地址作为用户名与密码，其中字母小写。
[Device] mac-authentication user-name-format mac-address with-hyphen lowercase
(2)     验证配置结果
# 显示MAC地址配置信息。
<Device> display mac-authentication
MAC address authentication is enabled.
 PAP authentication is enabled
 User name format is MAC address in lowercase, like xx-xx-xx-xx-xx-xx
 Fixed username:mac
 Fixed password:not configured
          Offline detect period is 180s
          Quiet period is 180s.
          Server response timeout value is 100s
          The max allowed user number is 1024 per slot
          Current user number amounts to 1
          Current domain is ***.***
 
Silent Mac User info:
          MAC Addr         From Port                    Port Index
Ethernet1/0/1 is link-up
  MAC address authentication is enabled
  Authenticate success: 1, failed: 0
  Max number of on-line users is 256
  Current online user number is 1
          MAC Addr         Authenticate state           Auth Index
          00e0-fc12-3456   MAC_AUTHENTICATOR_SUCCESS     29
# 用户认证成功后，可通过如下显示命令查看上线用户的连接信息。
<Device> display connection
Slot:  1
Index=29  ,Username=00-e0-fc-12-34-56@***.***
 IP=N/A
 IPv6=N/A
 MAC=00e0-fc12-3456
 
 Total 1 connection(s) matched on slot 1.
 Total 1 connection(s) matched.