z z

z

z

z z

If more than one client is connected to a port, you cannot configure a Guest VLAN for this port. When a Guest VLAN is configured for a port, only one MAC address authentication user can access the port. Even if you set the limit on the number of MAC address authentication users to more than one, the configuration does not take effect.

The undo vlan command cannot be used to remove the VLAN configured as a Guest VLAN. If you want to remove this VLAN, you must remove the Guest VLAN configuration for it. Refer to the VLAN module in this manual for the description on the undo vlan command.

Only one Guest VLAN can be configured for a port, and the VLAN configured as the Guest VLAN must be an existing VLAN. Otherwise, the Guest VLAN configuration does not take effect. If you want to change the Guest VLAN for a port, you must remove the current Guest VLAN and then configure a new Guest VLAN for this port.

802.1x authentication cannot be enabled for a port configured with a Guest VLAN.

The Guest VLAN function for MAC authentication does not take effect when port security is enabled.

Configuring the Maximum Number of MAC Address Authentication Users Allowed to Access a Port

You can configure the maximum number of MAC address authentication users for a port in order to control the maximum number of users accessing a port. After the number of access users has exceeded the configured maximum number, the device will not trigger MAC address authentication for subsequent access users, and thus these subsequent access users cannot access the network normally.

Follow these steps to configure the maximum number of MAC address authentication users allowed to access a port:

 

To do…

 

Use the command…

 

Remarks

 

Enter system view

 

system-view

 

 

 

 

 

 

 

 

Enter Ethernet port view

 

interface interface-type

 

 

 

interface-number

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Required

 

Configure the maximum number

mac-authentication

 

By default, the maximum

 

of MAC address authentication

 

number of MAC address

 

max-auth-num user-number

 

 

users allowed to access a port

 

authentication users allowed

 

 

 

 

 

 

 

 

 

to access a port is 256.

 

 

 

 

 

 

1-6

Page 299
Image 299
3Com WX3000 Configure the maximum number, MAC address authentication Number of MAC address, Max-auth-num user-number