Operation Manual – MAC Address AuthenticationH3C S5600 Series Ethernet SwitchesChapter 1 MAC Address AuthenticationConfiguration1-7Caution:z If more than one client are connected to a port, you cannot configure a Guest VLANfor this port.z When a Guest VLAN is configured for a port, only one MAC address authenticationuser can access the port. Even if you set the limit on the number of MAC addressauthentication users to more than one, the configuration does not take effect.z The undo vlan command cannot be used to remove the VLAN configured as aGuest VLAN. If you want to remove this VLAN, you must remove the Guest VLANconfiguration for it. Refer to the VLAN module in this manual for the description onthe undo vlan command.z Only one Guest VLAN can be configured for a port, and the VLAN configured as theGuest VLAN must be an existing VLAN. Otherwise, the Guest VLAN configurationdoes not take effect. If you want to change the Guest VLAN for a port, you mustremove the current Guest VLAN and then configure a new Guest VLAN for this port.z 802.1x authentication cannot be enabled for a port configured with a Guest VLAN.z The Guest VLAN function for MAC address authentication does not take effectwhen port security is enabled.1.4.3 Configuring the Maximum Number of MAC Address AuthenticationUsers Allowed to Access a PortYou can configure the maximum number of MAC address authentication users for aport in order to control the maximum number of users accessing a port. After thenumber of access users has exceeded the configured maximum number, the switch willnot trigger MAC address authentication for subsequent access users, and thus thesesubsequent access users cannot access the network normally.Follow these steps to configure the maximum number of MAC address authenticationusers allowed to access a port:To do... Use the command... RemarksEnter system view system-view —Enter Ethernet port viewinterfaceinterface-typeinterface-number—Configure the maximumnumber of MAC addressauthentication usersallowed to access a portmac-authenticationmax-auth-numuser-numberRequiredBy default, the maximumnumber of MAC addressauthentication users allowedto access a port is 256.
