Huawei Quidway S6500 Series, Руководство по управлению

Страница: 555 / 845

Command Manual - Security
Quidway S6500 Series Ethernet Switches
Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-6
When you execute this command in system view, if you do not input the
interface-list
parameter, it means that to enable Guest VLAN on all ports; if you specify this
parameter, it means that to enable Guest VLAN on the specified port.
When you execute this command in Ethernet port view, you can only enable Guest
VLAN on the current port, and the
interface-list
parameter cannot be input.
Note the following:
z
Guest VLAN is only supported in the port-based authentication mode.
z
A switch only can be configured with one Guest VLAN.
z
Users who skip the authentication, fail in the authentication or get offline belong to
the Guest VLAN.
z
If
dot1x dhcp-launch
is configured on the switch, the Guest VLAN function
cannot be implemented because the switch does not send active authentication
packet in this mode.
Example
# Set the authentication mode to port-based.
[Quidway] dot1x port-method portbased
# Enable Guest VLAN on all ports.
[Quidway] dot1x guest-vlan 1
1.1.6 dot1x max-user
Syntax
dot1x max-user user-number
[
interface interface-list
]
undo dot1x max-user
[
interface interface-list
]
View
System view/Ethernet port view
Parameter
user-number
: Specifies the limit to the amount of supplicants on the port, ranging from 1
to 1024. By default, the maximum user number is 1024.
interface interface-list
: Ethernet interface list including several Ethernet interfaces,
expressed in the format
interface-list
= {
interface-num
[
to interface-num
] } & <1-10>.
interface-num
specifies a single Ethernet interface in the format
interface-num
=
{
interface-type interface-num
|
interface-name
}, where
interface-type
specifies the
interface type,
interface-num
specifies the interface number and
interface-name
specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.