Huawei Quidway S3500 Series Operation Manual page 478

Operation Manual - Security
Quidway S3500 Series Ethernet Switches
I. Enabling 802.1x re-authentication
Before enabling the 802.1x re-authentication, you must enable the 802.1x feature both
on the port and globally.
Perform the following in system view or Ethernet port view.
Table 1-9 Enabling/disabling 802.1x user re-authentication
Enable
re-authentication
Disable
re-authentication
By default, 802.1x re-authentication is disabled on all ports.
In system view, if the interface-list parameter is not specified, it means that to enable
the 802.1x re-authentication feature on all interfaces; if the interface-list parameter is
specified, it means that to enable the feature on the specified interfaces. In Ethernet
port view, the interface-list parameter cannot be specified, and you can use command
only to enable the feature on the current interface.
II. Configuring 802.1x re-authentication timeout timer
The period of re-authentication is decided by the following two modes:
1) The switch takes the session-timeout value in the access-accept packet as the
authentication period.
2) The switch takes the value set by the user through the dot1x reauth-period
command as the authentication period. And this period defaults to 3600 seconds.
During the authentication, the switch takes the last received one as the authentication
period. For example, after the user configured the authentication period on the switch,
the switch receives the packet with the termination-action attributes of 1, and then the
switch takes the session-timeout value in the access-accept packet as the
authentication period.
Perform the following in system view.
Table 1-10 Configuring 802.1x re-authentication timeout timer
Configure parameters of
the timer
Return to the defaults
By default, reauth-period-value is 3600 seconds.
Operation
802.1x user
802.1x user
Operation
dot1x timer reauth-period reauth-period-value
undo dot1x timer reauth-period
Huawei Technologies Proprietary
Command
dot1x re-authenticate
interface-list ]
undo dot1x re-authenticate [ interface
interface-list ]
Command
1-9
Chapter 1 802.1x Configuration
[
interface