user-manage online-user mac-address check enable

Function

The user-manage online-user mac-address check enable command enables the function of checking the MAC addresses of online users.

The undo user-manage online-user mac-address check enable command disables the function.

Format

user-manage online-user mac-address check enable

undo user-manage online-user mac-address check enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the function is disabled.

With the function, the FW obtains the MAC address of a user who goes online. If a user initiates a network access request again when going online, the FW checks whether the user MAC address in the request changes. If yes, the user will go offline. The user can access desired network resources only after being reauthenticated.

The function takes effect only when the network between user devices and the FW is a Layer-2 network.

Example

# Enable the function of checking user MAC addresses.

<sysname> system-view
[sysname] user-manage online-user mac-address check enable