232
DCS-3950 series Ethernet switch manual
Command: dot1x macfilter enable
no dot1x macfilter enable
Function: Enables the dot1x address filter function in the switch; the ‘no dot1x macfilter
enable’ command disables the dot1x address filter function.
Command mode: Global Mode
Default: dot1x address filter is disabled by default.
Usage Guide: When dot1x address filter function is enabled, the switch will filter the
authentication user by the MAC address. Only the authentication request initialed by the
users in the dot1x address filter table will be accepted.
Example: Enable dot1x address filter function for the switch.
Switch(Config)#dot1x macfilter enable
14.2.2.10 dot1x max-req
Command: dot1x max-req <count>
no dot1x max-req
Function: Set the number of EAP request/MD5 frame to be sent before the switch
re-initials authentication on no supplicant response; the ‘no dot1x max-req’ command
restores the default setting.
Parameters: < count> is the times to re-transfer EAP request/ MD5 frames, the valid
range is 1 to 10.
Command mode: Global Mode
Default: The default maximum for retransmission is 2.
Usage Guide: The default value is recommended in setting the EAP request/ MD5
retransmission times.
Example: Change the maximum retransmission times for EAP request/ MD5 frames to
5 times.
Switch(Config)#dot1x max-req 5
14.2.2.11 dot1x max-user macbased
Command: dot1x max-user macbased <number>
no dot1x max-user macbased
Function: Set the maximum users allowed to connect to the port; the ‘no dot1x
max-user’ command restores the default setting.
Parameters: < number> is the maximum users allowed, the valid range is 1 to 254.
Command mode: Port configuration mode.
Default: The default maximum user allowed is 1.
Usage Guide: This command is available for ports using MAC-based access
management, if MAC address authenticated exceeds the number of allowed user,
additional users will not be able to access the network.
Example: Set port 0/0/3 to allow 5 users.
Switch(Config-Ethernet0/0/3)#dot1x max-user macbased 5