MAC access advanced settings

Introduction

User account formats

MAC authentication supports the following user account formats:

·     Shared user account—You can specify one username and password to be shared by all MAC authentication users on the device. The username and password can be any valid strings, including MAC addresses.

·     MAC-based user account—The MAC address of each user is used by the device as the username and password for MAC authentication.

Authentication ISP domain

To implement different access policies for users, you can specify authentication ISP domains that have different access policies for MAC authentication users.

Offline detect timer

This timer sets the interval that the device must wait for traffic from a user before the device determines that the user is idle. If the device has not received traffic from a user before the timer expires, the device logs off that user and requests the accounting server to stop accounting for the user.

Quiet timer

This timer sets the interval that the device must wait before the device can perform MAC authentication for a user that has failed MAC authentication. All packets from the MAC address are dropped during the quiet time. This quiet mechanism prevents repeated authentication from affecting system performance.

Server timeout timer

This timer sets the interval that the device waits for a response from a RADIUS server before the device determines that the RADIUS server is unavailable. If the timer expires during MAC authentication, the user fails MAC authentication.