< Home

mac-group

Function

The mac-group command creates a MAC address group.

The undo mac-group command deletes a MAC address group.

Format

mac-group group-name

undo mac-group group-name

Parameters

Parameter Description Value
group-name Indicates the name of a MAC address group.

The value is a string of case-insensitive characters. If the MAC address group name does not contain any space or question mark (?), the length is 1 to 63 characters; if the MAC address group name contains spaces or question marks (?), the length is 3 to 65 characters and you must enclose the name with double quotation marks. For example, "mac group test". If the MAC address group name has spaces at the start or end, the system automatically removes the spaces when saving the name.

Views

Virtual gateway security view

Default Level

2: Configuration level

Usage Guidelines

In a MAC address authentication scenario, the administrator needs to first create a MAC address group on the virtual gateway and add users' MAC addresses to the MAC address group. When a user's authentication request carrying the MAC address reaches the virtual gateway, the virtual gateway searches for the user group to which the user belongs based on the user name and then locates the MAC address group based on the binding relationship between the user group and the MAC address group. If the MAC address of the user can be found in the MAC address group, the user passes the authentication and can go online normally. If the MAC address cannot be found, the user fails the authentication, and the virtual gateway rejects the user's login request.

Example

# Create a MAC address group named group1.

<sysname> system-view
[sysname] v-gateway gateway
[sysname-gateway] security
[sysname-gateway-security] mac-group group1
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >