Operation Manual – 802.1x-System Guard
H3C S3100 Series Ethernet Switches
1)
The switch uses the value of the Session-timeout attribute field of the
Access-Accept packet sent by the RADIUS server as the re-authentication
interval.
2)
The switch uses the value configured with the dot1x timer reauth-period
command as the re-authentication interval for access users.
Note the following:
During re-authentication, the switch always uses the latest re-authentication interval
configured, no matter which of the above-mentioned two ways is used to determine the
re-authentication interval. For example, if you configure a re-authentication interval on
the switch and the switch receives an Access-Accept packet whose Termination-Action
attribute field is 1, the switch will ultimately use the value of the Session-timeout
attribute field as the re-authentication interval.
The following introduces how to configure the 802.1x re-authentication timer on the
switch.
Table 1-8 Configure the re-authentication interval
Enter system view
Configure a
re-authentication interval
1.5 Displaying and Debugging 802.1x
After performing the above configurations, you can display and verify the
802.1x-related configuration by executing the display command in any view.
You can clear 802.1x-related statistics information by executing the reset command in
user view.
Table 1-9 Display and debug 802.1x
Display the configuration,
session, and statistics
information about 802.1x
Clear 802.1x-related
statistics information
Operation
system-view
dot1x timer
reauth-period
reauth-period-value
Operation
display dot1x [ sessions
| statistics ] [ interface
interface-list ]
reset dot1x statistics
[ interface interface-list ]
Command
Command
1-22
Chapter 1 802.1x Configuration
Remarks
—
Optional
By default, the
re-authentication interval
is 3,600 seconds.
Remarks
This command can be
executed in any view.
Execute this command in
user view.
Need help?
Do you have a question about the H3C S3100 8C SI and is the answer not in the manual?