H3C S6812 Series Command Reference Manual page 1808

Examples
# Enable
Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] mac-authentication re-authenticate
server-unreachable keep-online
Related commands
display mac-authentication
mac-authentication timer
Use mac-authentication timer to configure a MAC authentication timer.
Use undo mac-authentication timer to restore the default of a MAC authentication timer.
Syntax
mac-authentication timer { offline-detect offline-detect-value | quiet quiet-value | server-timeout
server-timeout-value }
undo mac-authentication timer { offline-detect | quiet | server-timeout }
Default
The offline detect timer is 300 seconds, the quiet timer is 60 seconds, and the server timeout timer is
100 seconds.
Views
System view
Predefined user roles
network-admin
Parameters
offline-detect offline-detect-value: Specifies the offline detect timer in the range of 60 to
2147483647, in seconds.
quiet quiet-value: Specifies the quiet timer in the range of 1 to 3600, in seconds.
server-timeout server-timeout-value: Specifies the server timeout timer in the range of 100 to 300,
in seconds.
Usage guidelines
MAC authentication uses the following timers:
•
Offline detect timer—Sets the interval that the device waits for traffic from a user before the
device regards the user as idle. When the offline detection feature is enabled, the device logs
off the user and requests to stop accounting for the user after the timer expires.
After you set the offline detect timer, assign the same value to the MAC address aging timer by
using the mac-address timer command. This operation prevents a MAC authenticated user
from being offline within the offline detect timer due to MAC address entry expiration.
•
Quiet timer—Sets the interval that the device must wait before the device can perform MAC
authentication for a user who has failed MAC authentication. All packets from the MAC address
are dropped during the quiet time. This quiet mechanism prevents repeated authentication from
affecting system performance.
the keep-online feature for authenticated MAC
13
authentication users on