Filter
Top Products
219
Command: dot1x macfilter enable
no dot1x macfilter enable
Function: Enable switch dot1x address filter function; use the “no” command to disable
dot1x address filter function.
Command mode: global configuration mode
Default: switch disable dot1x address filter function.
Instructions: While enable switch dot1x address filter function, switch will filter
authentication MAC address, only the authentication requirement which from dot1x
address filter list will be accepted.
Example: Enable switch MAC address filter function.
Switch(Config)#dot1x macfilter enable
8.2.2.8 dot1x max-req
Command: dot1x max-req <count>
no dot1x max-req
Function: Configure sending EAP-request/MD5 frame maximum times before switch did
not receive suppliant response and restart authentication; use the “no” command to
restore default.
Parameter: <count> is the times of sending EAP-request/ MD5 frame, The range: 1~10.
Command mode: global configuration mode
Default: Maximum is 2 times.
Instructions: When user configure the maximum times of sending EAP-request/ MD5
frame, it is suggested to use default value.
Example: Change the maximum times of EAP-request/ MD5 frame as 5 times.
Switch(Config)#dot1x max-req 5
8.2.2.9 dot1x max-use
Command: dot1x max-user <number>
no dot1x max-user
Function: Configure the permission maximum user for specific port; use the “no”
command to restore default.
Parameter: <number> is the maximum permission user amount, The range: 1~254.
Command mode: port configuration mode.
Default: Every port default user is 1.
Instructions: This command is valid only when the port adopts the access control
method which is based on MAC address, if the authentication MAC address quantity
exceeds the maximum permission access user quantity, the exceed users will not be
able to access network.
Example: Configure port 1/3 maximum permission to allow access 5 users.