3Com 5500G, 4210, 4200G manual # Set the maximum number of concurrent 802.1x users

Models: 4210 5500 5500G 4200G

1 336
Download 336 pages 59.74 Kb
Page 57
Image 57

Configuring Port Security mac-else-userlogin-secure-ext Mode 57

# Set aabbcc.net as the default user domain.

[3Com] domain default enable aabbcc.net

# Set the maximum number of concurrent 802.1x users.

[3Com] dot1x max-user 64

#Configure the switch to use MAC addresses as usernames for authentication, specifying that the MAC addresses should be lowercase without separators.

[3Com] mac-authentication authmode usernameasmacaddress usernameform

at without-hyphen

# Specify the ISP domain for MAC authentication.

[3Com] mac-authentication domain aabbcc.net

# Enable port security.

[3Com] port-security enable

# Set the maximum number of secure MAC addresses allowed on the port to 200.

[3Com] interface Ethernet 1/0/1

[3Com-Ethernet1/0/1] port-security max-mac-count 200

#Set the port security mode to mac-else-userlogin-secure-ext.

[3Com-Ethernet1/0/1] port-security port-mode mac-else-userlogin-secure-ext

# Set the NeedToKnow mode of the port to ntkonly.

[3Com-Ethernet1/0/1] port-security ntk-mode ntkonly

Complete Configuration #

domain default enable aabbcc.net

#

port-security enable

#

MAC-authentication domain aabbcc.net

#

radius scheme radius1 server-type standard

primary authentication 192.168.1.3 primary accounting 192.168.1.2 secondary authentication 192.168.1.2 secondary accounting 192.168.1.3 key authentication name

key accounting money

timer realtime-accounting 15 timer response-timeout 5 retry 5

user-name-format without-domain

#

domain aabbcc.net

scheme radius-scheme radius1

Page 57
Image 57
3Com 5500G, 4210 # Set the maximum number of concurrent 802.1x users, # Set the NeedToKnow mode of the port to ntkonly