1-4z If MAC address authentication is enabled on a port, you cannot configure the maximum number ofdynamic MAC address entries for that port (through the mac-address max-mac-count command),and vice versa.z If MAC address authentication is enabled on a port, you cannot configure port security (through theport-security enable command) on that port, and vice versa.z You can configure MAC address authentication on a port before enabling it globally. However, theconfiguration will not take effect unless MAC address authentication is enabled globally.MAC Address Authentication Enhanced Function ConfigurationMAC Address Authentication Enhanced Function Configuration Task ListComplete the following tasks to configure MAC address authentication enhanced function:Task RemarksConfiguring a Guest VLAN OptionalConfiguring the Maximum Number of MAC Address Authentication UsersAllowed to Access a Port OptionalConfiguring a Guest VLANDifferent from Guest VLANs described in the 802.1x and System-Guard manual, Guest VLANsmentioned in this section refer to Guests VLANs dedicated to MAC address authentication.After completing configuration tasks in Configuring Basic MAC Address Authentication Functions for aswitch, this switch can authenticate access users according to their MAC addresses or according tofixed user names and passwords. The switch will not learn MAC addresses of the clients failing in theauthentication into its local MAC address table, thus prevent illegal users from accessing the network.In some cases, if the clients failing in the authentication are required to access some restrictedresources in the network (such as the virus library update server), you can use the Guest VLAN.You can configure a Guest VLAN for each port of the switch. When a client connected to a port fails inMAC address authentication, this port will be added into the Guest VLAN automatically. The MACaddress of this client will also be learned into the MAC address table of the Guest VLAN, and thus theuser can access the network resources of the Guest VLAN.After a port is added to a Guest VLAN, the switch will re-authenticate the first access user of this port(namely, the first user whose unicast MAC address is learned by the switch) periodically. If this user