Configuring Mac Authentication Timers - HPE FlexNetwork MSR Series Configuration Manual

Step
308. Configure
authentication
account format.

Configuring MAC authentication timers

MAC authentication uses the following timers:
•
Offline detect timer—Sets the interval that the device waits for traffic from a user before the
device regards the user idle. If a user connection has been idle within the interval, the device
logs the user out and stops accounting for the user.
•
Quiet timer—Sets the interval that the device must wait before the device can perform MAC
authentication for a user who has failed MAC authentication. All packets from the MAC address
are dropped during the quiet time. This quiet mechanism prevents repeated authentication from
affecting system performance.
•
Server timeout timer—Sets the interval that the device waits for a response from a RADIUS
server before the device regards the RADIUS server unavailable. If the timer expires during
MAC authentication, the user cannot access the network.
To configure MAC authentication timers:
Step
309. Enter system view.
310. Configure
authentication timers.
Setting the maximum number of concurrent MAC
authentication users on a port
Perform this task to prevent the system resources from being overused.
To set the maximum number of concurrent MAC authentication users on a port:
Step
311. Enter system view.
312. Enter interface view.
Command
•
Use
account
mac-authentication
user-name-format mac-address
[
without-hyphen } [ lowercase |
the MAC
uppercase ] ]
user
•
Use one shared user account for
all
mac-authentication
user-name-format
[ account name ] [ password
{ cipher | simple } string ]
Command
system-view
mac-authentication
MAC
{ offline-detect offline-detect-value |
quiet quiet-value | server-timeout
server-timeout-value }
Command
system-view
interface
interface-number
one MAC-based user
for each user:
{ with-hyphen
users:
fixed
timer
interface-type
127
Remarks
By default, the device uses the
|
MAC address of a user as the
username and password for
MAC authentication. The MAC
address is in the hexadecimal
notation without hyphens, and
letters are in lower case.
Remarks
N/A
By default, the offline detect
timer is 300 seconds, the quiet
timer is 60 seconds, and the
server timeout timer is 100
seconds.
Remarks
N/A
N/A