Command Manual - Security
Quidway S6500 Series Ethernet Switches Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-6
When you execute this command in system view, if you do not input the interface-list
parameter, it means that to enable Guest VLAN on all ports; if you specify this
parameter, it means that to enable Guest VLAN on the specified port.
When you execute this command in Ethernet port view, you can only enable Guest
VLAN on the current port, and the interface-list parameter cannot be input.
Note the following:
z Guest VLAN is only supported in the port-based authentication mode.
z A switch only can be configured with one Guest VLAN.
z Users who skip the authentication, fail in the authentication or get offline belong to
the Guest VLAN.
z If dot1x dhcp-launch is configured on the switch, the Guest VLAN function
cannot be implemented because the switch does not send active authentication
packet in this mode.
Example
# Set the authentication mode to port-based.
[Quidway] dot1x port-method portbased
# Enable Guest VLAN on all ports.
[Quidway] dot1x guest-vlan 1
1.1.6 dot1x max-user
Syntax
dot1x max-user user-number [ interface interface-list ]
undo dot1x max-user [ interface interface-list ]
View
System view/Ethernet port view
Parameter
user-number: Specifies the limit to the amount of supplicants on the port, ranging from 1
to 1024. By default, the maximum user number is 1024.
interface interface-list: Ethernet interface list including several Ethernet interfaces,
expressed in the format interface-list = { interface-num [ to interface-num ] } & <1-10>.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the
interface type, interface-num specifies the interface number and interface-name
specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
To Next Page
Loading...
