Configuring The Maximum Number Of Mac Address Authentication Users Allowed To Access A Port - H3C S5600 Series Operation Manual

Operation Manual – MAC Address Authentication
H3C S5600 Series Ethernet Switches
Caution:
If more than one client are connected to a port, you cannot configure a Guest VLAN
for this port.
When a Guest VLAN is configured for a port, only one MAC address authentication
user can access the port. Even if you set the limit on the number of MAC address
authentication users to more than one, the configuration does not take effect.
The undo vlan command cannot be used to remove the VLAN configured as a
Guest VLAN. If you want to remove this VLAN, you must remove the Guest VLAN
configuration for it. Refer to the VLAN module in this manual for the description on
the undo vlan command.
Only one Guest VLAN can be configured for a port, and the VLAN configured as the
Guest VLAN must be an existing VLAN. Otherwise, the Guest VLAN configuration
does not take effect. If you want to change the Guest VLAN for a port, you must
remove the current Guest VLAN and then configure a new Guest VLAN for this port.
802.1x authentication cannot be enabled for a port configured with a Guest VLAN.
The Guest VLAN function for MAC address authentication does not take effect
when port security is enabled.
1.4.3 Configuring the Maximum Number of MAC Address Authentication
Users Allowed to Access a Port
You can configure the maximum number of MAC address authentication users for a
port in order to control the maximum number of users accessing a port. After the
number of access users has exceeded the configured maximum number, the switch will
not trigger MAC address authentication for subsequent access users, and thus these
subsequent access users cannot access the network normally.
Follow these steps to configure the maximum number of MAC address authentication
users allowed to access a port:
Enter system view
Enter Ethernet port view
Configure the maximum
number of MAC address
authentication users
allowed to access a port
To do... Use the command...
system-view
interface
interface-type
interface-number
mac-authentication
max-auth-num
user-number
Chapter 1 MAC Address Authentication
—
—
Required
By default, the maximum
number of MAC address
authentication users allowed
to access a port is 256.
1-7
Configuration
Remarks