Optional) Setting The Timers Of Mac Address Authentication - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
----End

2.5.7 (Optional) Setting the Timers of MAC Address Authentication

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
mac-authen timer { guest-vlan reauthenticate-period interval | offline-detect
offline-detect-value | quiet-period quiet-value | server-timeout server-timeout-
value }
Parameters of timers for MAC address authentication are set.
l
l
l
l
----End
Issue 06 (2010–01–08)
2. Run:
mac-authen domain isp-name
A domain name is configured for a user who uses MAC address authentication.
In the interface view:
1. Run:
system-view
The system view is displayed.
2. Run:
interface { ethernet | gigabitethernet } interface-number
The interface view is displayed.
3. Run:
mac-authen domain isp-name
A domain name is configured for a user who uses MAC address authentication.
The default authentication domain is domain default.
guest-vlan reauthenticate-period: Interval for re-authenticating users in a guest VLAN. By
default, the re-authentication interval is 30s.
offline-detect: Offline-detect timer used to set the interval for the S9300 to check whether
a user goes offline. By default, the offline timer is 300s.
quiet-period: Quiet timer. After the user authentication fails, the S9300 waits for a certain
period before processing authentication requests of the user. During the quiet period, the
S9300 does not process authentication requests from the user. By default, the quiet timer is
60s.
server-timeout: Server timeout timer. In the user authentication process, if the connection
between the S9300 and the RADIUS server times out, the authentication fails. By default,
the time interval of the authentication server is 30s.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
2-27