3Com 7757 Configuration Manual page 236

236 C 29: C
HAPTER ENTRALIZED
Configuring the Timers
Used in Centralized MAC
Address Authentication
Configuring Centralized
MAC Address
Re-Authentication
MAC A A
DDRESS UTHENTICATION
Table 166 Configure the ISP domain for centralized MAC address authentication users
Operation
Configure the ISP domain for
MAC address authentication
users
The following timers are used in centralized MAC address authentication:
Offline detect timer, which sets the time interval for a switch to test whether a
■
user goes offline. Upon detecting a user is offline, a switch notifies the RADIUS
server of the user to trigger the RADIUS server to stop the accounting on the
user.
Quiet timer, which sets the quiet period for a switch. After a user fails to pass
■
the authentication performed by a switch, the switch quiets for a specific
period (the quiet period) before it authenticates users again.
Server timeout timer. During authentication, the switch prohibits the user from
■
accessing the network through the corresponding port if the connection
between the switch and RADIUS server times out. In this case, the user can
have it authenticated through another port of the switch.
Reauth-period timer. After a user pass the MAC address authentication, the
■
switch will periodically request the server for re-authentication. The period is
determined by the Reauth-period server.
Table 167 lists the operations to configure the timers used in centralized MAC
address authentication.
Table 167 Configure the timers used in centralized MAC address authentication
Operation
Enter system view
Configure a timer used in
centralized MAC address
authentication
Re-authentication function enables a switch to re-authenticate a user's identity or
change his authentication information when necessary if the user adopts the MAC
address authentication to access the network.
C
ONFIGURATION
Command
mac-authentication
domain isp-name
Command
system-view
mac-authentication
timer { offline-detect
offline-detect-value | quiet
quiet-value | server-timeout
server-timeout-value |
reauth-period
reauth-period-value }
Description
Required
By default, the "default
domain" is used as the ISP
domain.
Description
-
Optional
The default settings of the
timers used in centralized
MAC address authentication
are as follows:
Offline detect timer: 300
■
seconds
Quiet timer: 60 seconds
■
Server timeout timer: 100
■
seconds
Reauth-period timer: 1800
■
seconds