Specifying A Timeout For Retransmission Of Messages; To The Authentication Server; Specifying A Timeout For Retransmission Of; Eap-Request Frames To The Client - Dell PowerConnect B-RX Configuration Manual

33
Configuring 802.1x port security
Syntax: maxreq <value>

Specifying a timeout for retransmission of messages

to the authentication server

When performing authentication, the BigIron RX receives EAPOL frames from the Client and passes
the messages on to the RADIUS server. The device expects a response from the RADIUS server
within 30 seconds. If the RADIUS server does not send a response within 30 seconds, the BigIron
RX retransmits the message to the RADIUS server. The time constraint for retransmission of
messages to the Authentication Server can be between 1 – 4294967295 seconds.
For the BigIron RX, the possible values are 1 - 4294967295.
For example, to configure the device to retransmit a message if the Authentication Server does not
respond within 45 seconds, enter the following command.
BigIron RX(config-dot1x)# servertimeout 45
Syntax: servertimeout <seconds>

Specifying a timeout for retransmission of

EAP-request frames to the client

Acting as an intermediary between the RADIUS Authentication Server and the Client, the BigIron RX
receives RADIUS messages from the RADIUS server, encapsulates them as EAPOL frames, and
sends them to the Client. When the BigIron RX relays an EAP-Request frame from the RADIUS
server to the Client, it expects to receive a response from the Client within 30 seconds. If the Client
does not respond within the allotted time, the device retransmits the EAP-Request frame to the
Client. The time constraint for retransmission of EAP-Request frames to the Client can be between
1 – 4294967295 seconds.
For example, to configure the device to retransmit an EAP-Request frame if the Client does not
respond within 45 seconds, enter the following command.
BigIron RX(config-dot1x)# supptimeout 45
Syntax: supptimeout <seconds>

Initializing 802.1x on a port

To initialize 802.1x port security on a port, or to flush all of its information on that port and start
again, enter a command such as the following.
BigIron RX# dot1x initialize e 3/1
Syntax: dot1x initialize <portnum>

Allowing multiple 802.1x clients to authenticate

If there are multiple clients connected to a single 802.1x-enabled port, the BigIron RX
authenticates each of them individually. When multiple clients are connected to the same
802.1x-enabled port, the functionality described in "How 802.1x multiple client authentication
works" on page 969 is enabled by default. You can optionally do the following:
980 BigIron RX Series Configuration Guide
53-1002253-01