authentication max-sessions

Specifies the maximum number of MAC sessions that can be authenticated per device or per port for MAC authentication and 802.1X authentication.
Syntax
authentication max-sessions count
no authentication max-sessions count
Command Default

The default number of MAC sessions that can be authenticated on a single interface is 2.

Parameters
count
Specifies the maximum number of authenticated MAC sessions.
Modes

Interface configuration mode

Usage Guidelines

The maximum number of authenticated MAC sessions on an interface depends on the ICX device and dynamic ACL assignments.

If RADIUS assigns dynamic ACL to at least one client on the interface, the maximum number of MAC sessions that can be authenticated is limited to 32 in all ICX devices.

If dynamic ACL is not assigned to any of the clients on the interface, the maximum number of MAC addresses that can be authenticated varies depending on the ICX device as specified in Maximum number of authenticated MAC sessions per port on various platforms.

System reload is not required for the changes to take effect. However, existing sessions are cleared for the changes to take effect.

Maximum Number of Authenticated MAC Sessions per Port on Various Platforms

Supported platforms Maximum number of MAC sessions per port when none of the Clients has dynamic ACL Maximum number of MAC sessions per port when at least one User has Dynamic ACL
ICX 7750 1024 32
ICX 7650 1024 32
ICX 7450 1024 32
ICX 7250 1024 32
ICX 8100 1024 32
ICX 8200 1024 32

The system limit for authenticated MAC sessions also varies and depends on the ICX device and dynamic ACL assignments.

Maximum Number of Authenticated MAC Sessions per System (Standalone or Stack)

Supported platforms Maximum number of MAC sessions per system when none of the clients has dynamic ACL Maximum number of MAC sessions per system when at least one client has dynamic ACL
ICX 7750 1536 512
ICX 7650 1536 512
ICX 7450 1536 512
ICX 7250 1536 512
ICX 8100 1536 512
ICX 8200 1536 512

The no form of the command reinstates the maximum authenticated MAC sessions allowed per port to the default value of 2.

Examples

The following example specifies the maximum number of authenticated MAC sessions for port 1/1/1. 

device# configure terminal
device(config)# interface ethernet 1/1/1
device(config-if-e1000-1/1/1)# authentication max-sessions 30
History
Release version Command history
08.0.20 This command was introduced.
08.0.30b The command was made available for ICX 7250 and ICX 7450 devices. The maximum number of authenticated MAC sessions per port was increased from 32 to 256 and 1024, depending on the platforms.
08.0.70 Support for this command was added on ICX 7650 devices.
Parent topic: Commands A and B