Huawei Quidway S8500 Series Command Manual page 885

Command Manual – Security
Quidway S8500 Series Routing Switches
server-timeout-value: Specifies how long the duration of a timeout timer of an
Authentication Server is. The value ranges from 100 to 300 in units of second and
defaults to 100 seconds.
supp-timeout: Specifies the authentication timeout timer of a Supplicant. After the
Authenticator sends Request/Challenge request packet which requests the MD5
encrypted text, the supp-timeout timer of the Authenticator begins to run. If the
Supplicant does not respond back successfully within the time range set by this timer,
the Authenticator will resend the above packet.
supp-timeout-value: Specifies how long the duration of an authentication timeout timer
of a Supplicant is. The value ranges from 10 to 120 in units of second and defaults to
30.
tx-period: Specifies the transmission timeout timer. After the Authenticator sends the
Request/Identity request packet which requests the user name or user name and
password together, the tx-period timer of the Authenticator begins to run. If the
Supplicant does not respond back with authentication reply packet successfully, then
the Authenticator will resend the authentication request packet.
tx-period-value: Specifies how long the duration of the transmission timeout timer is.
The value ranges from 10 to 120 in units of second and defaults to 30.
Note:
It is recommended to configure different handshake period value and handshake
timeout times according to the number of users:
When the number of users is 2048, the handshake period value should be no
smaller than 2 minutes, and the handshake timeout times should be no less than 3
times;
When the number of users is 1024, the handshake period value should be no
smaller than 1 minutes, and the handshake timeout times should be no less than 3
times
When the number of users is 512, the handshake period value should be no smaller
than 30 seconds, and the handshake timeout times should be no less than 2 times.
Description
Use the dot1x timer command to configure the 802.1x timers.
Use the undo dot1x timer command to restore the default values.
When it is run, 802.1x enables many timers to control the rational and orderly
interacting of the Supplicant, the Authenticator and the Authenticator Server. This
command can set some of the timers (while other timers cannot be set) to adapt the
Huawei Technologies Proprietary
1-15
Chapter 1 802.1x Configuration Commands