交换机做了mac认证,但是查不到认证成功信息。配置如下:
domain default enable test
mac-authentication
mac-authentication domain test
radius scheme system primary authentication 172.16.0.90
key authentication cipher $c$3$qNMclmjmHfFz+7P1VwbwiDiaRxy4pukISmapVtg=
user-name-format without-domain
domain test
authentication lan-access radius-scheme system
access-limit disable
state active
idle-cut disable
self-service-url disable
interface GigabitEthernet1/0/21
mac-authentication #
但是 显示的信息没有认证成功。[H3C]dis mac-authentication interface GigabitEthernet 1/0/21
MAC address authentication is enabled.
User name format is MAC address in lowercase, like xxxxxxxxxxxx
Fixed username:mac
Fixed password:not configured
Offline detect period is 300s
Quiet period is 60s
Server response timeout value is 100s
The max allowed user number is 1024 per slot
Current user number amounts to 0
Current domain is test
Silent MAC User info:
MAC Addr From Port Port Index
10c3-7b58-05ea GigabitEthernet1/0/21 9437204
GigabitEthernet1/0/21 is link-up MAC address authentication is enabled
Authenticate success: 0, failed: 242
Max number of on-line users is 256
Current online user number is 0
我查看了没有发现这个端口的MAC地址(本来应该是10c3-7b58-05ea 也在的即做了mac认证的):
[H3C]dis mac-address
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)
000c-290f-db94 1 LEARNED GigabitEthernet1/0/2 AGING
认证成功的应该为下图2一样,1就是看不到IP。认证失败。
MAC Addr Authenticate State Auth Index
[H3C]Connection closed by foreign host.
(0)
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论