802.1x-Related
Parameter
Configuration
Advanced 802.1x
Configuration
Table 319 Configure 802.1x timers and the maximum number of users
Operation
Enter system view
Configure the
maximum number of
concurrent on-line
users for specified
ports
Configure the
maximum retry times
to send request
packets
Configure 802.1x
timers
Trigger the
quiet-period timer
n
As for the dot1x max-user command, if you execute it in system view without
■
specifying the interface-list argument, the command applies to all ports. You
can also use this command in port view. In this case, this command applies to
the current port only and the interface-list argument is not needed.
As for the configuration of 802.1x timers, the default values are
■
recommended.
Advanced 802.1x configurations, as listed below, are all optional.
CAMS cooperation configuration, including multiple network adapters
■
detecting, proxy detecting, and so on.
Client version checking configuration
■
DHCP -triggered authentication
■
Guest VLAN configuration
■
802.1x-Related Parameter Configuration
Command
system-view
In system view:
dot1x max-user user-number
[ interface interface-list ]
In port view:
dot1x max-user user-number
dot1x retry max-retry-value
dot1x
timer { handshake-period
handshake-period-value |
reauth-period
reauth-period-value |
quiet-period quiet-period-value |
tx-period tx-period-value |
supp-timeout
supp-timeout-value |
server-timeout
server-timeout-value | ver-period
ver-period-value }
dot1x quiet-period
Description
-
Optional
By default, up to 1,024 concurrent
on-line users are allowed on each
port.
Optional
By default, the maximum retry
times to send a request packet is
2. That is, the authenticator
system sends a request packet to a
supplicant system for up to two
times by default.
Optional
The default values of 802.1x
timers are as follows:
handshake-period-value: 15
■
seconds
reauth-period-value: 3,600
■
seconds
quiet-period-value: 60 seconds
■
tx-period-value: 30 seconds
■
supp-timeout-value: 30
■
seconds
server-timeout-value: 100
■
seconds
ver-period-value: 30 seconds
■
Optional
By default, a quiet-period timer is
disabled.
401