13-19
Configuring Port-Based and User-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
B. Specify User-Based Authentication or Return to
Port-Based Authentication
User-Based 802.1X Authentication.
Syntax: aaa port-access authenticator client-limit < port-list > < 1 - 32 >
Used after executing aaa port-access authenticator < port-list >
(above) to convert authentication from port-based to user-
based. Specifies user-based 802.1X authentication and the
maximum number of 802.1X-authenticated client sessions
allowed on each of the ports in < port-list >. If a port currently
has no authenticated client sessions, the next authenticated
client session the port accepts determines the untagged
VLAN membership to which the port is assigned during the
session. If another client session begins later on the same
port while an earlier session is active, the later session will
be on the same untagged VLAN membership as the earlier
session.
Note: The client limit is 256 clients per-port for MAC-auth
and Web-auth; the client limit for 802.1X is 32 clients per
port. The MAC-auth and Web-auth limit of 256 clients only
applies when there are fewer than 16,384 authentication
clients on the entire switch. After the limit of 16, 384 clients
is reached, no additional authentication clients are allowed
on any port for any method.
To Next Page
Loading...
Need help?
General