Timer And Maximum User Number Configuration - 3Com 4200G 12-Port Configuration Manual

Configuring Basic 802.1x
Functions
Timer and Maximum
User Number
Configuration
Table 122 Configure basic 802.1x functions
Operation Command
Enter system view system-view
Enable 802.1x globally dot1x
Enable 802.1x for Use the following command in
specified ports system view:
dot1x [ interface interface-list ]
Use the following command in
port view:
dot1x
Set port access control dot1x port-control
mode for specified { authorized-force |
ports unauthorized-force | auto } [
interface interface-list ]
Set port access method dot1x port-method { macbased
for specified ports | portbased } [ interface
interface-list ]
Set authentication dot1x authentication-method
method for 802.1x { chap | pap | eap }
users
CAUTION:
802.1x-related configurations can all be performed in system view. Port access control
mode and port access method can also be configured in port view.
If you perform a configuration in system view and do not specify the interface-list
argument, the configuration applies to all ports. Configurations performed in
Ethernet port view apply to the current Ethernet port only and the interface-list
argument is not needed in this case.
802.1x configurations take effect only after you enable 802.1x both globally and for
specified ports.
Table 123 Configure 802.1x timers and the maximum number of users
Operation Command
Enter system view system-view
Configure the In system view:
maximum number of
dot1x max-user user-number [
concurrent on-line
interface interface-list ]
users for specified
ports In port view:
dot1x max-user user-number
Configure the dot1x retry max-retry-value
maximum retry times
to send request
packets

Timer and Maximum User Number Configuration 159

Description
—
Required
By default, 802.1x is disabled
globally.
Required
By default, 802.1x is disabled for all
ports.
Optional
By default, an 802.1x-enabled port
operates in an auto mode.
Optional
The default port access method is
MAC-address-based (that is, the
macbased keyword is used by
default).
Optional
By default, a switch performs CHAP
authentication in EAP terminating
mode.
Description
-
Optional
By default, up to 256 concurrent
on-line users are allowed on each
port.
Optional
By default, the maximum retry
times to send a request packet is 2.
That is, the authenticator system
sends a request packet to a
supplicant system for up to two
times by default.