Timer And Maximum User Number Configuration - 3Com 5500-EI PWR Install Manual

Caution:
802.1x configurations take effect only after you enable 802.1x both globally and for specified ports.
The settings of 802.1x and MAC address learning limit are mutually exclusive. Enabling 802.1x on
a port will prevent you from setting the limit on MAC address learning on the port and vice versa.
The settings of 802.1x and aggregation group member are mutually exclusive. Enabling 802.1x on
a port will prevent you from adding the port to an aggregation group and vice versa.
When the switch itself operates as an authentication server, its authentication method for 802.1x
users cannot be configured as EAP.
Handshake packets are used to test whether a user is online or not. Users need to run the
proprietary client software of H3C to respond to the handshake packets.
As clients not running the H3C client software do not support the online user handshaking function,
switches cannot receive handshake acknowledgement packets from them in handshaking periods.
To prevent users being falsely considered offline, you need to disable the online user handshaking
function in this case.
The handshake packet protection function requires the cooperation of the client and the
authentication server. If either of the two ends does not support the function, you need to disable
the function.

Timer and Maximum User Number Configuration

Follow these steps to configure 802.1x timers and the maximum number of users:
To do...
Enter system view
Set the
maximum
number of
concurrent
on-line users
for specified
ports
Set the maximum retry times
to send request packets
Use the command...
system-view
In system dot1x max-user user-number
view [ interface interface-list ]
interface interface-type
interface-number
In port view dot1x max-user user-number
quit
dot1x retry max-retry-value
—
Optional
By default, a port can
accommodate up to 256 users at
a time.
Optional
By default, the maximum retry
times to send a request packet is
2. That is, the authenticator
system sends a request packet
to a supplicant system for up to
two times by default.
1-15
Remarks