Optional) Setting The Maximum Number Of Concurrent Access Users - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
----End
2.4.8 (Optional) Setting the Maximum Number of Concurrent
Access Users
Context
When the number of access users on interfaces reaches the maximum value, the S3700 does not
trigger authentication for subsequent access users. These subsequent access users thus cannot
access the network.
You can set the maximum number of access users on interfaces in the following ways.
Procedure
l
l
Issue 01 (2011-07-15)
– authorized-force: An interface is always in authorized state and allows users to access
network resources without authentication.
– unauthorized-force: An interface is always in unauthorized state and does not users to
access network resources.
In the system view:
1. Run:
system-view
The system view is displayed.
2. Run:
dot1x max-user user-number interface { interface-type interface-number1
[ to interface-number2 ] } &<1-10>
The maximum number of concurrent access users is set on the interfaces.
You can set the maximum number of concurrent access users on interfaces in batches
by specifying the interface list in the dot1x max-user command in the system view.
In the interface view:
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
3. Run:
dot1x max-user user-number
The maximum number of concurrent access users is set on the interface.
By default, each interface allows up to 256 concurrent access users.
This command only takes effect for the interface where users are authenticated based on
MAC addresses. If users are authenticated based on the interface, the maximum number of
access users is automatically set to 1. Therefore, only one user needs to be authenticated
successfully on the interface, and other users can access the network after the first user
passes authentication.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
61