Configuration Guide Vol. 1


3.6.2 Web authentication

The following table describes the capacity limits for Web authentication.

Table 3-37: Capacity limits for Web authentication per device

Item

Maximum number

Maximum number of authentications

Fixed VLAN mode

1024 #1

Dynamic VLAN mode

1024 #2

Legacy mode

1024 #3

Registered users in the internal Web authentication DB

300 #4

Total size of files that can be specified in authentication page switching

1024KB

Files that can be specified in authentication page switching

100

IPv4 access lists that can be set for unauthenticated terminals

1

Filter conditions that can be specified for the IPv4 access lists for unauthenticated terminals

20

Note #1

When Web authentication (fixed VLAN mode), IEEE 802.1X authentication (port-based and VLAN-based (static)), and MAC-based authentication are all enabled, the total authenticated terminals allowed among all the authentication modes is 1024 per switch.

Note #2

Web authentication (dynamic VLAN mode), MAC-based authentication (dynamic VLAN mode), and IEEE 802.1X authentication (VLAN-based (dynamic)) are all enabled, the total authenticated terminals allowed among all the authentication modes is 1024 per switch.

Note #3

When Web authentication (Legacy mode) and IEEE 802.1X authentication (VLAN-based (dynamic)) are both enabled, the total authenticated terminals allowed among all the authentication modes is 1024 per switch.

Note #4

When a user ID registered in the internal Web authentication DB is used on more than one terminal, terminals up to the maximum number of terminal authentications can be authenticated. If the number of user IDs that will need to be authenticated is greater than the maximum number of entries in the Web authentication DB, authenticate users remotely using a RADIUS server rather than the internal Web authentication DB.