mac-authen username

Function

The mac-authen username command configures the user name for MAC address authentication.

The undo mac-authen username command restores the default setting.

By default, the MAC address without hyphens (-) or colons (:) is used as the user name and password for MAC address authentication.

Format

mac-authen username { fixed username [ password cipher password ] | macaddress [ format { with-hyphen [ normal ] [ colon ] | without-hyphen } [ uppercase ] [ password cipher password ] ] }

undo mac-authen username [ fixed username [ password cipher password ] | macaddress [ format { with-hyphen [ normal ] [ colon ] | without-hyphen } [ uppercase ] [ password cipher password ] ] ]

Parameters

Parameter	Description	Value
fixed username	Specifies a fixed user name for MAC address authentication.	The value is a string of 1 to 64 case-sensitive characters without spaces. When double quotation marks are used around the string, spaces are allowed in the string.
password cipher password	Specifies the password in cipher text for MAC address authentication. You do not need to set a password for a fixed user name if the authentication mode is none. In this case, the user can log in without a password. However, this poses security risks and is not recommended. If no password is set when the MAC address is used as the user name, the user can log in using the MAC address as the password. A password must be configured when local authentication is used in the AAA scheme.	The value is a string of case-sensitive characters without spaces. The password is either a plain-text string of 1 to 128 characters or a cipher-text string of 48 to 188 characters. When double quotation marks are used around the string, spaces are allowed in the string. NOTE: For security purposes, change the default password in real time. The new password must be a combination of at least two of the following: digits, lowercase letters, uppercase letters, and special characters. In addition, the password must consist of six or more than six characters.
macaddress	Specifies the MAC address as the user name for MAC address authentication.	-
format { with-hyphen [ normal ] [ colon ] \| without-hyphen }	Specifies the MAC address format. with-hyphen: indicates that the MAC address contains hyphens (-), for example, 00e0-fc01-0101. with-hyphen normal: indicates that the MAC address contains hyphens (-), for example, 00-e0-fc-01-01-01. with-hyphen colon: indicates that the MAC address contains colons (:), for example, 00e0:fc01:0101. with-hyphen normal colon: indicates that the MAC address contains colons (:), for example, 00:e0:fc01:01:01. without-hyphen: indicates that the MAC address does not contain hyphens (-) or colons (:), for example, 00e0fc010101.	-
uppercase	Indicates that the name of a MAC address authentication user is in uppercase.	-

Views

MAC access profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The following user name formats are available for MAC address authentication:

Fixed user name: A user uses the fixed user name and password configured by the administrator for authentication.
MAC address: A user uses the MAC address as the user name for authentication. In addition, the MAC address or user-defined character string can be used as the password.

By default, the device sends the user MAC address as the user name and password to the authentication server for authentication. However, the users cannot be easily identified and managed in this case. To flexibly identify and manage users, run the mac-authen username command to configure fixed user names and passwords for MAC address authentication users.

Precautions

When configuring the user name format for MAC address authentication, ensure that the authentication server supports the user name format.

When the authentication scheme combined user-defined Portal authentication that FW participates in user authentication and MAC address authentication, if this command is run and the user has passed MAC address authentication, the user name recorded in the online user table is the user name specified in this command.

Example

# In the MAC access profile mac_access_profile, configure the device to use the MAC address containing hyphens (-) as the user name.

<sysname> system-view
[sysname] mac-access-profile name mac_access_profile
[sysname-mac-access-profile-mac_access_profile] mac-authen username macaddress format with-hyphen