Optional) Setting The Timers Of Mac Address Authentication - Huawei Quidway S3700 Series Configuration Manual

Quidway S3700 Series Ethernet Switches
Configuration Guide - Security
Context
If the user adopts MAC address authentication or the fixed user name that does not contain the
domain name, the default authentication domain is used when no authentication domain is
configured. If the authentication domain is specified in the user name of a fixed format, the
authentication domain of the user is used.
Procedure
l
----End

2.5.6 (Optional) Setting the Timers of MAC Address Authentication

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
mac-authen timer { guest-vlan reauthenticate-period interval | offline-detect
offline-detect-value | quiet-period quiet-value | reauthenticate-period interval |
server-timeout server-timeout-value }
Parameters of timers for MAC address authentication are set.
l guest-vlan reauthenticate-period: Interval for re-authenticating users in a guest VLAN. By
l offline-detect: Offline-detect timer used to set the interval for the S3700 to check whether
l quiet-period: Quiet timer. After the user authentication fails, the S3700 waits for a certain
l server-timeout: Server timeout timer. In the user authentication process, if the connection
----End
Issue 01 (2011-07-15)
NOTE
Before configuring the authentication domain for the user who uses MAC address authentication, you need
to confirm that a domain is available. Otherwise, the system displays an error message during the
configuration.
In the system view:
1. Run:
system-view
The system view is displayed.
2. Run:
mac-authen domain isp-name [ mac-address mac-address mask mask ]
A domain name is configured for a user who uses MAC address authentication.
default, the re-authentication interval is 60s.
a user goes offline. By default, the offline timer is 300s.
period before processing authentication requests of the user. During the quiet period, the
S3700 does not process authentication requests from the user. By default, the quiet timer is
60s.
between the S3700 and the RADIUS server times out, the authentication fails. By default,
the time interval of the authentication server is 30s.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 NAC Configuration
71