dot1x binding-mac
Syntax
dot1x binding-mac mac-address
undo dot1x binding-mac mac-address
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
mac-address: Specifies a MAC address, in the format of H-H-H, excluding broadcast, multicast, and all-zero MAC addresses.
Description
Use dot1x binding-mac to configure an 802.1X MAC address binding entry.
Use undo dot1x binding-mac to delete an 802.1X MAC address binding entry.
By default, no 802.1X MAC address binding entries are configured on a port.
This command takes effect only when the 802.1X MAC address binding feature takes effect.
802.1X MAC address binding entries, both manually configured and automatically generated, never age out. They can survive a user logoff or a device reboot. To delete an entry, you must use the undo dot1x binding-mac mac-address command. An 802.1X MAC address binding entry cannot be deleted when the user in the entry is online.
After the number of 802.1X MAC address binding entries reaches the upper limit of concurrent 802.1X users (set by using the dot1x max-user command), the following restrictions exist:
Users not in the binding entries will fail authentication even after the users in the binding entries go offline.
New 802.1X MAC address binding entries are not allowed.
Related commands: dot1x binding-mac enable
Examples
# Configure an 802.1X MAC address binding entry for the MAC address 000a-eb29-75f1 on Ethernet 1/0/1.
<Sysname> system-view [Sysname] interface ethernet 1/0/1 [Sysname-Ethernet1/0/1] dot1x binding-mac 000a-eb29-75f1