Setting the maximum number of 802.1X authentication attempts for MAC authenticated users

When a port uses both 802.1X authentication and MAC authentication, the device accepts 802.1X authentication requests from MAC authenticated users. If a MAC authenticated user passes 802.1X authentication, the user will come online as an 802.1X user. If the user fails 802.1X authentication, the user continues to make 802.1X authentication attempts depending on client configuration.

Perform this task to limit the number of 802.1X authentication attempts made by a MAC authenticated user.

To set the maximum number of 802.1X authentication attempts for MAC authenticated users on a port:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enter Layer 2 Ethernet interface view.

interface interface-type interface-number

N/A

3. Set the maximum number of 802.1X authentication attempts for MAC authenticated users on the port.

dot1x after-mac-auth max-attempt max-attempts

By default, the number of 802.1X authentication attempts for MAC authenticated users is not limited on a port.