authentication mode

Function

The authentication mode command configures the user access mode.

The undo authentication mode command restores the default user access mode.

By default, the user access mode is multi-authen.

Format

authentication mode { multi-share | multi-authen [ max-user max-user-number ] }

undo authentication mode [ multi-authen max-user ]

Parameters

Parameter	Description	Value
multi-share	Configures an interface to allow multiple users to go online. In this mode, the device authenticates only the first access user. If the first user passes authentication, subsequent users share the same network access rights with the first user. If the first user goes offline, other users also go offline.	-
multi-authen	Configures an interface to allow multiple users to go online. In this mode, the device authenticates each access user. If users pass authentication, the users are given individual network access rights. If a user goes offline, other users will not be affected.	-
max-user max-user-number	Specifies the maximum number of access users on the interface in multi-authen mode.	-

Parameter

Description

Value

multi-share

Configures an interface to allow multiple users to go online.

In this mode, the device authenticates only the first access user. If the first user passes authentication, subsequent users share the same network access rights with the first user. If the first user goes offline, other users also go offline.

multi-authen

Configures an interface to allow multiple users to go online.

In this mode, the device authenticates each access user. If users pass authentication, the users are given individual network access rights. If a user goes offline, other users will not be affected.

max-user max-user-number

Specifies the maximum number of access users on the interface in multi-authen mode.

Views

Authentication profile view

Default Level

2: Configuration level

Usage Guidelines

After 802.1X authentication is enabled, you can configure the user access mode on an interface based on the user access on the interface.

multi-share: applies when multiple data terminals are connected to the network on the interface and high security is not required.
multi-authen: applies when multiple data terminals are connected to the network on the interface and high security is required. In this access mode, you can configure the maximum number of access users based on the actual user quantity on the interface. This prevents malicious users from occupying a large amount of device resources and ensures that the users on other interfaces can normally go online.

Example

# In the authentication profile p1, set the user access mode to multi-authen.

<sysname> system-view
[sysname] authentication-profile name p1
[sysname-authentication-profile-p1] authentication mode multi-authen