Dot1X Mac-Binding Enable - HP FlexNetwork 7500 Series Command Reference Manual

Parameters
mac-address: Specifies a MAC address in the format of H-H-H, excluding broadcast, multicast, and
all-zero MAC addresses.
all: Specifies all MAC addresses that are bound to a port.
Usage guidelines
This command takes effect only when the 802.1X MAC address binding feature takes effect.
802.1X MAC address binding entries, both manually added and automatically generated, never age
out. They can survive a user logoff or a device reboot. To delete an entry, you must use the undo
dot1x mac-binding mac-address command. An 802.1X MAC address binding entry cannot be
deleted when the user in the entry is online.
After the number of 802.1X MAC address binding entries reaches the upper limit of concurrent
802.1X users (set by using the dot1x max-user command), the following restrictions exist:
•
Users not in the binding entries will fail authentication even after users in the binding entries go
offline.
•
New 802.1X MAC address binding entries are not allowed.
Examples
# Add an 802.1X MAC address binding entry on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x mac-binding 000a-eb29-75f1
Related commands
dot1x

dot1x mac-binding enable

dot1x port-method
dot1x mac-binding enable
Use dot1x mac-binding enable to enable the 802.1X MAC address binding feature.
Use undo dot1x mac-binding enable to disable the 802.1X MAC address binding feature.
Syntax
dot1x mac-binding enable
undo dot1x mac-binding enable
Default
The 802.1X MAC address binding feature is disabled.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command takes effect only on a port that performs MAC-based access control.
188