Installation manual

Command Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1 802.1x Configuration Commands
Huawei Technologies Proprietary
1-7
When you execute this command in Ethernet port view, you can only enable Guest
VLAN on the current port, and the interface-list parameter cannot be input.
Note the following:
z Guest VLAN is only supported in the port-based authentication mode.
z A switch only can be configured with one Guest VLAN.
z Users who skip the authentication, fail in the authentication or get offline belong to
the Guest VLAN.
z If dot1x dhcp-launch is configured on the switch, the Guest VLAN function
cannot be implemented because the switch does not send active authentication
packet in this mode.
Example
# Set the authentication mode to port-based.
[Quidway] dot1x port-method portbased
# Enable Guest VLAN on all ports.
[Quidway] dot1x guest-vlan 1
1.1.7 dot1x max-user
Syntax
dot1x max-user user-number [ interface interface-list ]
undo dot1x max-user [ interface interface-list ]
View
System view/Ethernet port view
Parameter
user-number: Specifies the limit to the amount of supplicants on the port, ranging from 1
to 256.
By default, the maximum user number is 256.
interface interface-list: Ethernet interface list including several Ethernet interfaces,
expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the
interface type, interface-num specifies the interface number and interface-name
specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.