1-8
# Add a local user.
z Specify the username and password.
[device] local-user 00-0d-88-f6-44-c1
[device-luser-00-0d-88-f6-44-c1] password simple 00-0d-88-f6-44-c1
z Set the service type to “lan-access”.
[device-luser-00-0d-88-f6-44-c1] service-type lan-access
[device-luser-00-0d-88-f6-44-c1] quit
# Add an ISP domain named aabbcc.net.
[device] domain aabbcc.net
New Domain added.
# Specify to perform local authentication.
[device-isp-aabbcc.net] scheme local
[device-isp-aabbcc.net] quit
# Specify aabbcc.net as the ISP domain for MAC authentication
[device] mac-authentication domain aabbcc.net
# Enable MAC authentication globally (This is usually the last step in configuring access control related
features. Otherwise, a user may be denied of access to the networks because of incomplete
configuaration.)
[device] mac-authentication
After doing so, your MAC authentication configuration will take effect immediately. Only users with the
MAC address of 00-0d-88-f6-44-c1 are allowed to access the Internet through port GigabitEthernet
1/0/2.
