Optional) Setting The Maximum Number Of Concurrent Access Users - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
2.4.8 (Optional) Setting the Maximum Number of Concurrent
Access Users
Context
When the number of access users on interfaces reaches the maximum value, the S9300 does not
trigger authentication for subsequent access users. These subsequent access users thus cannot
access the network.
You can set the maximum number of access users on interfaces in the following ways.
Procedure
l
l
Issue 06 (2010–01–08)
In the system view:
1. Run:
system-view
The system view is displayed.
2. Run:
dot1x max-user user-number interface { interface-type interface-number1
[ to interface-number2 ] } &<1-10>
The maximum number of concurrent access users is set on the interfaces.
You can configure the maximum number of concurrent access users on interfaces in
batches by specifying the interface list in the dot1x max-user command in the system
view.
In the interface view:
1. Run:
system-view
The system view is displayed.
2. Run:
interface { ethernet | gigabitethernet } interface-number
The interface view is displayed.
3. Run:
dot1x max-user user-number
The maximum number of concurrent access users is set on the interface.
By default, each interface allows up to 8192 concurrent access users.
This command takes effect only to the interface where users are authenticated based on
MAC addresses If users are authenticated based on the interface, the maximum number of
access users is automatically set to 1. Therefore, only one user needs to be authenticated
on the interface, and other users can access the network after the first user passes the
authentication.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
2-15