Mick, if the users are going through the NAC portal to login, we can limit the # of users there.
![](https://d1uyvls174j03l.cloudfront.net/extremenetworks-us/attachment/RackMultipart20150514-13484-376txr-Screen_Shot_2015-05-14_at_1.52.45_PM_inline.png)
The default value is #2.
Otherwise, from the rules point of view we cannot limit the number of devices if they are using basic mac-authentication or 802.1x. If they are forced to login via the portal with Secure Guest Access or Authenticated Registration, then we can limit it this way.