H3C Technologies H3C S3100 Series Switches - Manual (Page 462)

1-7
z If both the limit on the number of MAC address authentication users and the limit on the number of
users configured in the port security function are configured for a port, the smaller value of the two
configured limits is adopted as the maximum number of MAC address authentication users allowed
to access this port. Refer to the Port Security manual for the description on the port security
function.
z You cannot configure the maximum number of MAC address authentication users for a port if any
user connected to this port is online.
Configuring the Quiet MAC Function on a Port
You can configure whether to enable the quiet MAC function on a port. When this function is enabled,
the MAC address connected to this port will be set as a quiet MAC address if its authentication fails.
When this function is disabled, the MAC address will not become quiet no matter whether the
authentication is failed.
Table 1-5 Configure the quiet MAC function on a port
Operation Command Description
Enter system view system-view —
Enter Ethernet port view
interface interface-type
interface-number
—
Configure quiet MAC function
on the port
mac-authentication
intrusion-mode block-mac
enable
Required
Enabled by default.
Displaying and Debugging MAC Authentication
After the above configuration, you can execute the display command in any view to display system
running of MAC Authentication configuration, and to verify the effect of the configuration. You can
execute the reset command in user view to clear the statistics of MAC Authentication.
Table 1-6 Display and debug MAC Authentication
Operation Command Description
Display global or on-port
information about MAC
authentication
display mac-authentication
[ interface interface-list ]
Available in any view
Clear the statistics of global or
on-port MAC authentication
reset mac-authentication
statistics [ interface
interface-type
interface-number ]
Available in user view