By default, the authorization status of an interface is
auto
.
l
Setting the authorization status of an interface in the interface view
1.
Run:
system-view
The system view is displayed.
2.
Run:
interface
interface-type
interface-number
The interface view is displayed.
3.
Run:
dot1x port-control
{
auto
|
authorized-force
|
unauthorized-force
}
The authorization status of the interface is configured.
By default, the authorization status of an interface is
auto
.
----End
5.3.8 (Optional) Setting the Maximum Number of Concurrent
Access Users on an Interface
After the maximum number of concurrent access users is set on an interface, if the number of
access users on the interface reaches the maximum, the AR1200-S does not authenticate
subsequent access users and these users cannot access networks.
Context
The AR1200-S allows a maximum of 128 concurrent access users.
NOTE
If the number of current online users on an interface has exceeded the maximum number that you set, online
users are not affected but new access users cannot access networks.
You can set the maximum number of concurrent access users in the system view or interface
view.
Procedure
l
Setting the maximum number of concurrent access users in the system view
1.
Run:
system-view
The system view is displayed.
2.
Run:
dot1x max-user
user-number
interface
{
interface-type
interface-number1
[
to
interface-number2
] } &<1-10>
The maximum number of concurrent access users is set on an interface.
By default, each interface allows a maximum number of 128 concurrent access users.
l
Setting the maximum number of concurrent access users in the interface view
1.
Run:
system-view
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
5 NAC Configuration
Issue 02 (2012-03-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
105