Optional) Enabling Dhcp Packets To Trigger Authentication; Optional) Configuring 802.1X Timers - Huawei Quidway S9300 Configuration Manual

2 NAC Configuration
----End

2.4.9 (Optional) Enabling DHCP Packets to Trigger Authentication

Context
After DHCP packets are enabled to trigger authentication, 802.1x allows the S9300 to trigger
the user identity authentication when the access user runs DHCP to apply for the IP address. In
this case, an 802.1x user is authenticated without dial-up by using the client software. This speeds
up network deployment.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
dot1x dhcp-trigger enable
Dynamic Host Configuration Protocol (DHCP) packets are enabled to trigger user
authentication.
By default, DHCP packets do not trigger authentication.
After you run the dot1x dhcp-trigger enable command, users cannot obtain IP addresses
through DHCP if they do not pass the authentication.
----End

2.4.10 (Optional) Configuring 802.1x Timers

Context
When enabled, 802.1x starts many timers to ensure the reasonable and ordered exchanges
between supplicants, the authenticator, and the authentication server.
To adjust the exchange process, you can run some commands to change values of some timers,
but some timers cannot be adjusted. It may be necessary in certain cases or in poor networking
environment. Normally, it is recommended that you retain the default settings of the timers.
2-16
CAUTION
If the number of users already existing on the interface is greater than the maximum number
that you set, all the users are disconnected from the interface.
The maximum number of NAC access users allowed by the S9300 depends on the models
of the S9300. The specification is 8192 multiplied by number of slots of the LPU.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
Issue 06 (2010–01–08)