144 
When the MAC authentication multi-VLAN mode is enabled, do not specify authorization VLANs for 
MAC authentication users on the port. 
Examples 
# Enable MAC authentication multi-VLAN mode on GigabitEthernet 2/1/1. 
<Sysname> system-view 
[Sysname] interface gigabitethernet 2/1/1 
[Sysname-GigabitEthernet2/1/1] mac-authentication host-mode multi-vlan 
Related commands  
display mac-authentication 
mac-authentication max-user 
Use mac-authentication max-user to set the maximum number of concurrent MAC authentication users 
on a port. 
Use undo mac-authentication max-user to restore the default. 
Syntax 
mac-authentication max-user user-number 
undo mac-authentication max-user 
Default 
The maximum number of concurrent MAC authentication users on a port is 256. 
Views 
Ethernet interface view 
Predefined user roles 
network-admin 
Parameters 
user-number: Sets the maximum number of concurrent MAC authentication users on the port. The value 
range for this argument is 1 to 256. 
Examples 
# Configure port GigabitEthernet 2/1/1 to support up to 32 concurrent MAC authentication users. 
<Sysname> system-view 
[Sysname] interface gigabitethernet 2/1/1 
[Sysname-GigabitEthernet2/1/1] mac-authentication max-user 32 
Related commands 
display mac-authentication 
mac-authentication re-authenticate server-unreachable 
keep-online 
Use  mac-authentication re-authenticate server-unreachable keep-online to enable the keep-online 
feature on a port. This feature keeps authenticated MAC authentication users online when no server is 
reachable for MAC reauthentication.