3Com 8807 Configuration Manual page 227

Setting the Maximum
times of authentication
request message
retransmission
Configuring 802.1x
Timers
VLAN when the maximum number of re-authentications is reached. Users in a
Guest VLAN can utilize resources in the Guest VLAN without undergoing the
802.1x authentication, but they can utilize the resources outside the Guest VLAN
only when they have passed the 802.1x authentication. In this way,
unauthenticated users can still perform operations such as accessing some
resources with the 802.1x client not installed, and upgrading 802.1x client.
Perform the following configuration in system view or Ethernet interface view.
Table 191 Configure Guest VLAN
Operation
Enable Guest VLAN
Disable Guest VLAN
Note that:
Guest VLAN is only supported when the switch performs port-based
■
authentication.
A switch can have only one Guest VLAN.
■
Users who are not authenticated, fail to be authenticated, or are offline are all
■
members of the Guest VLAN.
Guest VLANs can only be configured on Access ports.
■
You must use an existing VLAN ID, and the corresponding VLAN cannot be a
■
Super VLAN isolate-user-vlan.
You must perform corresponding configuration manually to isolate the Guest
■
VLAN from other VLAN interfaces.
The following commands are used for setting the maximum retransmission times
of the authentication request message that the switch sends to the supplicant.
Perform the following configuration in system view.
Table 192 Set the maximum times of the authentication request message retransmission
Operation
Set the maximum times of the authentication
request message retransmission
Restore the default maximum retransmission
times
By default, the max-retry-value is 2. That is, the switch can retransmit the
authentication request message to a supplicant for 2 times at most.
The following commands are used for configuring the 802.1x timers.
Perform the following configuration in system view.
802.1x Configuration
Command
dot1x guest-vlan vlan-id [ interface
interface-list ]
undo dot1x guest-vlan vlan-id [ interface
interface-list ]
Command
dot1x retry max-retry-value
undo dot1x retry
227