3Com WX3000 Timer and Maximum User Number Configuration, Dot1x max-user user-number

z802.1x configurations take effect only after you enable 802.1x both globally and for specified ports.

zIf you enable 802.1x for a port, you cannot set the maximum number of MAC addresses that can be learnt for the port. Meanwhile, if you set the maximum number of MAC addresses that can be learnt for a port, it is prohibited to enable 802.1x for the port.

zIf you enable 802.1x for a port, it is not available to add the port to an aggregation group. Meanwhile, if a port has been added to an aggregation group, it is prohibited to enable 802.1x for the port.

zChanging the access control method on a port by the dot1x port-methodcommand will forcibly log out the online 802.1x users on the port.

zWhen the device itself operates as an authentication server, its authentication method for 802.1x users cannot be configured as EAP.

zHandshaking packets are used to test whether a user is online or not. Users need to run the proprietary iNode client software to respond to the handshaking packets.

zAs clients not running the iNode client software do not support the online user handshaking function, the device cannot receive handshaking acknowledgement packets from the client in handshaking periods. To prevent the user being falsely considered offline, you need to disable the online user handshaking function in this case.

zFor the handshaking packet secure function to take effect, the clients that enable the function need to cooperate with the authentication server. If either the clients or the authentication server does not support the function, disabling the handshaking packet secure function is needed.

Timer and Maximum User Number Configuration

Follow these steps to configure 802.1x timers and the maximum number of users:

To do…		Use the command…	Remarks
Enter system view		system-view	—
Set the	In	dot1x max-user user-number
	system
maximum		[ interface interface-list ]
	view
number of			Optional
concurrent		interface interface-type
			By default, a port can accommodate
on-line		interface-number
	In port		up to 256 users at a time.
users for
specified	view	dot1x max-user user-number
ports
		quit
			Optional
Set the maximum retry			By default, the maximum retry times
			to send a request packet is 2. That
times to send request		dot1x retry max-retry-value	is, the authenticator system sends a
packets			request packet to a supplicant
			system for up to two times by
			default.

1-14