Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
mac-authen authentication-method
Function
The mac-authen authentication-method command configures the authentication mode for MAC address authentication.
The undo mac-authen authentication-method command restores the default configuration.
By default, the authentication mode for MAC address authentication is set to PAP.
Usage Guidelines
Usage Scenario
In MAC address authentication, the access device exchanges RADIUS packets with the authentication server. Differences between authentication modes PAP and CHAP are as follows:
- PAP is a two-way handshake authentication protocol. It transmits passwords in plain text format in RADIUS packets.
- CHAP is a three-way handshake authentication protocol. It transmits only user names but not passwords in RADIUS packets. CHAP is more secure and reliable than PAP. If high security is required, CHAP is recommended.
By default, the authentication mode for MAC address authentication is set to PAP. The authentication mode can be changed to CHAP for higher security.
Precautions
The authentication server must support CHAP when the authentication mode is set to CHAP.
