H3C MSR Series Command Reference Manual page 208

Parameters
ead-timeout ead-timeout-value: Specifies the EAD rule timer in minutes. The value range for the
ead-timeout-value argument is 1 to 1440. The following matrix shows the ead-timeout
ead-timeout-value option and hardware compatibility:
Hardware
MSR810/810-W/810-W-DB/810-LM/810-W-LM/810-10-PoE/810-LM
-HK/810-W-LM-HK/810-LMS/810-LUS
MSR2600-10-X1
MSR 2630
MSR3600-28/3600-51
MSR3600-28-SI/3600-51-SI
MSR3610-X1/3610-X1-DP/3610-X1-DC/3610-X1-DP-DC
MSR 3610/3620/3620-DP/3640/3660
MSR5620/5660/5680
handshake-period handshake-period-value: Specifies the handshake timer in seconds. The value
range for the handshake-period-value argument is 5 to 1024.
quiet-period quiet-period-value: Specifies the quiet timer in seconds. The value range for the
quiet-period-value argument is 10 to 120.
reauth-period reauth-period-value: Specifies the periodic reauthentication timer in seconds. The
value range for the reauth-period-value argument is 60 to 7200.
server-timeout server-timeout-value: Specifies the server timeout timer in seconds. The value
range for the server-timeout-value argument is 100 to 300.
supp-timeout supp-timeout-value: Specifies the client timeout timer in seconds. The value range for
the supp-timeout-value argument is 1 to 120.
tx-period tx-period-value: Specifies the username request timeout timer in seconds. The value
range for the tx-period-value argument is 1 to 120.
Usage guidelines
In most cases, the default settings are sufficient. You can edit the timers, depending on the network
conditions.
•
In a low-speed network, increase the client timeout timer.
•
In a vulnerable network, set the quiet timer to a high value.
•
In a high-performance network with quick authentication response, set the quiet timer to a low
value.
•
In a network with authentication servers of different performance, adjust the server timeout
timer.
The network device uses the following 802.1X timers:
•
EAD rule timer (EAD timeout)—Sets the lifetime of each EAD rule. When the timer expires or
the user passes authentication, the rule is removed. If users fail to download the EAD client or
fail to pass authentication within the timer, they must reconnect to the network to access the
free IP.
•
Handshake timer (handshake-period)—Sets the interval at which the access device sends
client handshake requests to check the online status of a client that has passed authentication.
If the device does not receive a response after sending the maximum number of handshake
requests, it considers that the client has logged off.
185
Option compatibility
No
No
No
Yes
Yes
Yes
No
No