PLANET XGS3-24040 - Manual (Page 756)

Commands for Security Function Chapter 2 Commands for 802.1x
42-28
Command Mode: Global Mode.
Default: There is no free resource by default.
Usage Guide: This command is available only if user based access control is applied. If user based
access control has been applied, this command configures the limited resources which can be accessed
by the un-authenticated users. For port based and MAC based access control, users could access no
network resources before authentication.
If TrustView management system is available, the free resource can be configured in TrustView
server, and the TrustView server will distribute the configuration to the switches.
To be noticed, only one free resource can be configured for the overall network.
Example: To configure the free resource segment as 1.1.1.0, the mask is 255.255.255.0.
Switch(Config)#dot1x user free-resource 1.1.1.0 255.255.255.0
42.13 dot1x max-user macbased
Command: dot1x max-user macbased <number>
no dot1x max-user macbased
Function: Sets the maximum users allowed connect to the port; the “no dot1x max-user” command
restores the default setting.
Parameters: <number> is the maximum users allowed, the valid range is 1 to 256.
Command mode: Port configuration Mode.
Default: The default maximum user allowed is 1.
Usage Guide: This command is available for ports using MAC-based access management, if MAC
address authenticated exceeds the number of allowed user, additional users will not be able to access
the network.
Example: Setting port 1/3 to allow 5 users.
Switch(Config-If-Ethernet1/3)#dot1x max-user macbased 5
42.14 dot1x max-user userbased
Command: dot1x max-user userbased <number>
no dot1x max-user userbased
Function: Set the upper limit of the number of users allowed access the specified port when using
user-based access control mode; the “no dot1x max-user userbased” command is used to reset the
default value.
Parameters: <number> the maximum number of users allowed to access the network, ranging from 1 to
1~256.
Command Mode: Port Mode.
Default Settings: The maximum number of users allowed to access each port is 10 by default.
User Guide: This command can only take effect when the port adopts user-based access control mode.
If the number of authenticated users exceeds the upper limit of the number of users allowed access the
network, those extra users can not access the network.
Examples: Setting port 1/3 to allow 5 users.