dot1x max-user

Function

The dot1x max-user command sets the maximum number of 802.1X authentication users allowed on an interface.

The undo dot1x max-user command restores the default maximum number of 802.1X authentication users allowed on an interface.

By default, the number of 802.1X authentication users is the maximum number of 802.1X authentication users supported by the device.

Format

In the system view:

dot1x max-user user-number interface { interface-type interface-number1 [ to interface-number2 ] } &<1-10>

undo dot1x max-user [ user-number ] interface { interface-type interface-number1 [ to interface-number2 ] } &<1-10>

In the interface view:

dot1x max-user user-number

undo dot1x max-user [ user-number ]

Parameters

Parameter	Description	Value
user-number	Specifies the maximum number of 802.1X authentication users on an interface.	The value is an integer that varies depending on the product model.
interface { interface-type interface-number1 [ to interface-number2 ] }	Specifies the interface type and number. interface-type specifies the interface type. interface-number specifies the interface number.	-

Parameter

Description

Value

user-number

Specifies the maximum number of 802.1X authentication users on an interface.

The value is an integer that varies depending on the product model.

interface { interface-type interface-number1 [ to interface-number2 ] }

Specifies the interface type and number.

interface-type specifies the interface type.
interface-number specifies the interface number.

Views

System view, Ethernet interface view, GE interface view, MultiGE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, Port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To limit the maximum number of 802.1X authentication users allowed on an interface, run the dot1x max-user command.

Prerequisites

The 802.1X authentication function has been enabled globally and on an interface using the dot1x enable command.

Precautions

If the user access mode on an interface is interface-based (configured using the dot1x port-method command), the maximum number of 802.1X authentication users allowed on the interface is 1. Before running the dot1x max-user command to set the maximum number of 802.1X authentication users allowed on the interface, run the undo dot1x port-method command to restore the user access mode on the interface to MAC address-based.

Example

# In the system view, set the maximum number of 802.1X authentication users allowed on GE0/0/1 to 7.

<HUAWEI> system-view
[HUAWEI] dot1x max-user 7 interface gigabitethernet 0/0/1

# In the interface view, set the maximum number of 802.1X authentication users allowed on GE0/0/1 to 7.

<HUAWEI> system-view
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] dot1x max-user 7