1-6z For detailed 802.1X configuration, refer to 802.1X Configuration in the Security Volume.z For detailed MAC-based authentication configuration, refer to MAC Authentication Configuration inthe Security Volume.Setting the Maximum Number of Secure MAC AddressesWith port security enabled, more than one authenticated user is allowed on a port. The number ofauthenticated users allowed, however, cannot exceed the specified upper limit.By setting the maximum number of secure MAC addresses allowed on a port, you can:z Control the maximum number of users who are allowed to access the network through the port.z Control the number of secure MAC addresses that can be added with port security.Follow these steps to set the maximum number of secure MAC addresses allowed on a port:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet port view interface interface-typeinterface-number —Set the maximum number ofsecure MAC addressesallowed on a portport-security max-mac-countcount-valueRequiredNot limited by defaultThis configuration is different from that of the maximum number of MAC addresses that can be leanedby the port in MAC address management.Setting the Port Security ModeConfiguration PrerequisitesBefore setting the port security mode, ensure that:z 802.1X is disabled, the port access control method is macbased, and the port access control modeis auto.z MAC authentication is disabled.z The port does not belong to any aggregation group.The above requirements must be all met. Otherwise, you will see an error message and yourconfiguration will fail. On the other hand, after setting the port security mode on a port, you cannotchange any configurations of the first three requirements.
