274 CHAPTER 22: MAC AUTHENTICATION CONFIGURATION
c
CAUTION:
■ If both the limit on the number of MAC address authentication users and the
limit on the number of users configured in the port security function are
configured for a port, the smaller value of the two configured limits is adopted
as the maximum number of MAC address authentication users allowed to
access this port. Refer to
“Port Security Configuration” on page 121 the Port
Security manual for a description of the port security function.
■ You cannot configure the maximum number of MAC address authentication
users for a port if any user connected to this port is online
Configuring the Quiet
MAC Function on a Port
You can configure whether to enable the quiet MAC function on a port. When
this function is enabled, the MAC address connected to this port will be set as a
quiet MAC address if its authentication fails. When this function is disabled, the
MAC address will not become quiet no matter whether the authentication is
failed.
Displaying and
Debugging MAC
Authentication
After the above configuration, you can execute the display command in any view
to display system running of MAC Authentication configuration, and to verify the
effect of the configuration. You can execute the reset command in user view to
clear the statistics of MAC Authentication.
Configure the maximum
number of MAC address
authentication users allowed
to access a port
mac-authentication
max-auth-num user-number
Required
By default, the maximum
number of MAC address
authentication users allowed
to access a port is 256.
Table 207 Configure the maximum number of MAC address authentication users allowed
to access a port
Operation Command Description
Tabl e 208 Configure the quiet MAC function on a port
Operation Command Description
Enter system view system-view -
Eneter Ethernet port
view
interface interface-type
interface-number
-
Configure quiet MAC
function on the port
mac-authenticiaon
intrusion-mode block-mac enable
Required
Enabled by default.
Tabl e 209 Display and debug MAC Authentication
Operation Command Description
Display global or on-port
information about MAC
authentication
display mac-authentication
[ interface interface-list ]
Available in any view
Clear the statistics of global or
on-port MAC authentication
reset mac-authentication
statistics [ interface
interface-type
interface-number ]
Available in user view
To Next Page
Loading...
