Control the number of 802.1X-authenticated clients per port

You can now limit the number of 802.1X-authenticated sessions allowed on a port. Limiting the number of devices or PCs per port helps increase the security of the network. The default number of sessions allowed per port is 20, and you can configure 2-20 sessions per port.

This feature requires MAC-based 802.1x authentication (set security-mode 802.1X-mac-based).

To configure the maximum number of 802.1X-authenticated sessions per port:

config switch-controller security-policy 802-1X

edit <policy_name>

set security-mode 802.1X-mac-based

set client-limit <2-20>

set user-group <user_group_name>

next

end

For example:

config switch-controller security-policy 802-1X

edit "8021Xpolicy"

set security-mode 802.1X-mac-based

set client-limit 2

set user-group "1X_RADIUS_GROUP"

next

end