Optional) Re-Authenticating A User With The Specified Mac Address - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Context
When the number of access users on an interface reaches the limit, the S3700 does not trigger
the authentication for the users connecting to the interface later; therefore, these users cannot
access the network.
You can configure the maximum number of access users who adopt MAC address authentication
in the following ways.
Procedure
l
l
----End
2.5.9 (Optional) Re-Authenticating a User with the Specified MAC
Address
Context
The system can re-authenticate a user who has passed MAC address authentication. If the user
passes re-authentication, the user needs to be re-authorized; otherwise, the user goes offline.
Issue 01 (2011-07-15)
In the system view:
1. Run:
system-view
The system view is displayed.
2. Run:
mac-authen max-user user-number interface { interface-type interface-
number1 [ to interface-number2 ] } &<1-10>
The maximum number of access users who adopt MAC address authentication is set
on interfaces.
You can configure the maximum number of access users of interfaces in batches by
specifying the interface list in the mac-authen max-user command in the system
view.
In the interface view:
1. Run:
system-view
The system view is displayed.
2. Run:
interface interface-type interface-number
The interface view is displayed.
3. Run:
mac-authen max-user user-number
The maximum number of access users who adopt MAC address authentication on the
interface is set.
By default, the maximum number of access users who adopt MAC address authentication
on an interface of the S3700 is 256.
The maximum number of NAC access users is 512.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
73