Table of Contents
Advertisement
Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
III. Setting the EAD rule timeout time
With the EAD fast deployment function, a user is authorized by an EAD rule (generally
an ACL rule) to access the freely accessible network segment before passing
authentication. After successful authentication, the occupied ACL will be released. If a
large amount of users access the freely accessible network segment but fail the
authentication, ACLs will soon be used up and new users will be rejected.
An EAD rule timeout timer is designed to solve this problem. When a user accesses the
network, this timer is started. If the user neither downloads client software nor performs
authentication before the timer expires, the occupied ACL will be released so that other
users can use it. When there are a large number of users, you can shorten the timeout
time to improve the ACL usage efficiency.
Follow these steps to set the EAD rule timeout time:
Enter system view
Set EAD rule timeout
time
2.3 Displaying and Maintaining EAD Fast Deployment
Display 802.1x session
information, statistics, or
configuration information
2.4 EAD Fast Deployment Configuration Example
I. Network requirements
As shown in
connected to the freely accessible network segment and outside network.
It is required that:
Before successful 802.1 authentication, the host using IE to access outside
network will be redirected to the WEB server, and it can download and install
802.1x client software.
After successful 802.1x authentication, the host can access outside network.
To do...
Use the command...
system-view
dot1x timer ead-timeout
ead-timeout-value
To do...
Figure
2-1, the host is connected to the device, and the device is
Chapter 2 EAD Fast Deployment Configuration
Use the command...
display dot1x [ sessions
| statistics ] [ interface
interface-list ]
2-3
Remarks
—
Optional
30 minutes by default
Remarks
Available in any view
Advertisement
Chapters
Table of Contents
Troubleshooting
