Displaying and maintaining mac authentication, Displaying and maintaining mac authentication -6 – H3C Technologies H3C WX3000 Series Unified Switches User Manual

Page 289

Advertising
background image

29-6

z

802.1x authentication cannot be enabled for a port configured with a Guest VLAN.

z

The Guest VLAN function for MAC authentication does not take effect when port security is
enabled.

Configuring the Maximum Number of MAC Address Authentication Users Allowed to
Access a Port

You can configure the maximum number of MAC address authentication users for a port in order to
control the maximum number of users accessing a port. After the number of access users has
exceeded the configured maximum number, the device will not trigger MAC address authentication for
subsequent access users, and thus these subsequent access users cannot access the network
normally.

Follow these steps to configure the maximum number of MAC address authentication users allowed to
access a port:

To do…

Use the command…

Remarks

Enter system view

system-view

Enter Ethernet port view

interface interface-type
interface-number

Configure the maximum number of
MAC address authentication users
allowed to access a port

mac-authentication
max-auth-num
user-number

Required
By default, the maximum number of
MAC address authentication users
allowed to access a port is 256.

z

If both the limit on the number of MAC address authentication users and the limit on the number of
users configured in the port security function are configured for a port, the smaller value of the two
configured limits is adopted as the maximum number of MAC address authentication users allowed
to access this port. Refer to Port Security in H3C WX3000 Series Unified Switches Switching

Engine Configuration Guide

for the description on the port security function.

z

You cannot configure the maximum number of MAC address authentication users for a port if any
user connected to this port is online.

Displaying and Maintaining MAC Authentication

To do…

Use the command…

Remarks

Display global or on-port
information about MAC
authentication

display mac-authentication

[ interface

interface-list

]

Available in any view

Advertising