Setting The Maximum Number Of Concurrent Mac Authentication Users On A Port; Configuring Mac Authentication Delay - HP MSR Series Configuration Manual

Step
1. Enter system view.
2. Configure MAC
authentication timers.
Setting the maximum number of concurrent MAC
authentication users on a port
Perform this task to prevent the system resources from being overused.
To set the maximum number of concurrent MAC authentication users on a port:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Set the maximum number of
concurrent MAC
authentication users on the
port

Configuring MAC authentication delay

When both 802.1X authentication and MAC authentication are enabled on a port, you can delay
MAC authentication so that 802.1X authentication is preferentially triggered.
If no 802.1X authentication is triggered or 802.1X authentication fails within the delay period, the port
continues to process MAC authentication.
Do not
mac-else-userlogin-secure-ext when you use MAC authentication delay. The delay does not take
effect on a port in either of the two modes. For more information about port security modes, see
"Configuring port
To configure MAC authentication delay:
Step
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view.
3. Enable MAC authentication
delay and set the delay
timer.
Command
system-view
mac-authentication timer
{ offline-detect offline-detect-value |
quiet quiet-value | server-timeout
server-timeout-value }
Command
system-view
interface interface-type
interface-number
mac-authentication max-user
user-number
set the port
security."
Command
system-view
interface interface-type
interface-number
mac-authentication timer
auth-delay time
security mode to
125
Remarks
N/A
By default, the offline detect
timer is 300 seconds, the quiet
timer is 60 seconds, and the
server timeout timer is 100
seconds.
Remarks
N/A
N/A
The default setting is 4096.
mac-else-userlogin-secure
Remarks
N/A
N/A
By default, MAC authentication
delay is disabled.
or