H3C S9500 Series Operation Manual page 1137

Operation Manual – 802.1x
H3C S9500 Series Routing Switches
Note that:
Guest VLAN is supported only when the switch performs port-based
authentication.
A switch can have only one Guest VLAN.
Users who are not authenticated, fail to be authenticated, or are offline are all
members of the Guest VLAN.
Guest VLANs can only be configured on Access ports.
You must use an existing VLAN ID, and the corresponding VLAN cannot be a
Super VLAN isolate-user-vlan.
You must perform corresponding configuration manually to isolate the Guest
VLAN from other VLAN interfaces.
1.2.9 Setting the Maximum Retransmission Times of Authentication
Request Messages
The following commands are used for setting the maximum retransmission times of the
authentication request message that the switch sends to the supplicant.
Perform the following operations in system view to configure the maximum times of the
authentication request message retransmission:
Set the maximum times of the authentication request
message retransmission
Restore the default maximum retransmission times
By default, the max-retry-value is 2. That is, the switch can retransmit the
authentication request message to a supplicant for 2 times at most.
1.2.10 Configuring 802.1x Timers
The following commands are used for configuring the 802.1x timers.
Perform the following operations in system view to configure 802.1x timers:
To do...
Configure timers
Restore default
settings of the timers
handshake-period: This timer begins after the user has passed the authentication.
After setting handshake-period, system will send the handshake packet by the period.
To do...
Use the command...
dot1x timer { handshake-period handshake-period-value |
quiet-period quiet-period-value | tx-period tx-period-value |
supp-timeout supp-timeout-value | server-timeout
server-timeout-value }
undo dot1x timer { handshake-period | quiet-period |
tx-period | supp-timeout | server-timeout }
1-9
Chapter 1 802.1x Configuration
Use the command...
dot1x retry max-retry-value
undo dot1x retry