Authentication Session Limits on an Interface
By default, the number of MAC sessions that can be authenticated on a single interface
is two. The maximum number of sessions can be changed using the
authentication max-sessions command. The maximum number of authenticated MAC sessions on an interface depends
on the ICX device and dynamic ACL assignments. If RADIUS assigns dynamic ACLs to at
least one client on the interface, the maximum number of MAC sessions that can be
authenticated is limited to 32 in all ICX devices.
If a dynamic ACL is not assigned to any of the clients on the interface, the maximum number of MAC addresses that can be authenticated varies depending on the ICX device as specified in the following table. System reload is not required for the changes to take effect. However, existing sessions on the interface are cleared for the changes to take effect.
Maximum Number of Authenticated MAC Sessions per Port by ICX Device
| Supported Platforms | Maximum Number of MAC Sessions per Port When None of the Clients Has Dynamic ACL | Maximum Number of MAC Sessions per Port When at Least One Client Has Dynamic ACL |
|---|---|---|
| ICX 7850 | 1024 | 32 |
| ICX 7750 | 1024 | 32 |
| ICX 7650 | 1024 | 32 |
| ICX 7550 | 1024
Verify.
|
32
Verify.
|
| ICX 7450 | 1024 | 32 |
| ICX 7250 | 1024 | 32 |
| ICX 7150 | 1024 | 32 |
The system limit for authenticated MAC sessions also varies and depends on the ICX device and dynamic ACL assignments.
Maximum Number of Authenticated MAC Sessions per System (Standalone or Stack) by ICX Device
| Supported Platforms | Maximum Number of MAC Sessions per System When None of the Clients Has Dynamic ACL | Maximum Number of MAC Sessions per System When at Least One Client Has Dynamic ACL |
|---|---|---|
| ICX 7850 | 1536 | 512 |
| ICX 7750 | 1536 | 512 |
| ICX 7650 | 1536 | 512 |
| ICX 7550 | 1536
Verify.
|
512
Verify.
|
| ICX 7450 | 1536 | 512 |
| ICX 7250 | 1536 | 512 |
| ICX 7150 | 1536 | 512 |