dot1x binding-mac

Syntax

dot1x binding-mac mac-address

undo dot1x binding-mac mac-address

View

Layer 2 Ethernet interface view

Default level

2: System level

Parameters

mac-address: Specifies a MAC address, in the format of H-H-H, excluding broadcast, multicast, and all-zero MAC addresses.

Description

Use dot1x binding-mac to configure an 802.1X MAC address binding entry.

Use undo dot1x binding-mac to delete an 802.1X MAC address binding entry.

By default, no 802.1X MAC address binding entries are configured on a port.

This command takes effect only when the 802.1X MAC address binding feature takes effect.

802.1X MAC address binding entries, both manually configured and automatically generated, never age out. They can survive a user logoff or a device reboot. To delete an entry, you must use the undo dot1x binding-mac mac-address command. An 802.1X MAC address binding entry cannot be deleted when the user in the entry is online.

After the number of 802.1X MAC address binding entries reaches the upper limit of concurrent 802.1X users (set by using the dot1x max-user command), the following restrictions exist:

• Users not in the binding entries will fail authentication even after the users in the binding entries go offline.

• New 802.1X MAC address binding entries are not allowed.

Related commands: dot1x binding-mac enable

Examples

# Configure an 802.1X MAC address binding entry for the MAC address 000a-eb29-75f1 on Ethernet 1/0/1.

<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] dot1x binding-mac 000a-eb29-75f1