Configuring 802.1X For A Port - 3Com 4500G Family Configuration Manual

24/48 port
Hide thumbs Also See for 4500G Family:
Table of Contents

Advertisement

To do...
Set the maximum number of
attempts to send an authentication
request to a client
Set timers
Enable the quiet timer
Note that:
For 802.1X to take effect on a port, you must enable it both globally in system view and for the port
in system view or Ethernet interface view.
You can also enable 802.1X and set port access control parameters (that is, the port access control
mode, port access method, and the maximum number of users) for a port in Ethernet interface view.
For detailed configuration, refer to
configuring 802.1X globally and configuring 802.1X for a port lies in the applicable scope. If both a
global setting and a local setting exist for an argument of a port, the last configured one is in effect.
802.1X timers only need to be changed in special or extreme network environments. For example,
you can give the client timeout timer a higher value in a low-performance network, give the quiet
timer a higher value in a vulnerable network or a lower value for quicker authentication response, or
adjust the server timeout timer to suit the performance of the authentication server.
After an 802.1X user passes authentication, if the authentication server assigns a re-authentication
interval for the user through the session-timeout attribute, the assigned re-authentication interval
will take effect instead of that specified on the device. The re-authentication interval assignment
varies by server type. Refer to the specific authentication server implementation for further details.

Configuring 802.1X for a Port

Enabling 802.1X for a port
Follow these steps to enable 802.1X for a port:
Use the command...
Set the port
access control
dot1x port-method { macbased |
method for
portbased } [ interface
specified or all
interface-list ]
ports
Set the
maximum
dot1x max-user user-number
number of users
[ interface interface-list ]
for specified or
all ports
dot1x retry max-retry-value
dot1x timer { handshake-period
handshake-period-value |
quiet-period quiet-period-value |
reauth-period reauth-period-value
| server-timeout
server-timeout-value |
supp-timeout supp-timeout-value
| tx-period tx-period-value }
dot1x quiet-period
Configuring 802.1X for a
Port. The only difference between
1-12
Remarks
Optional
macbased by default
Optional
256 by default
Optional
2 by default
Optional
The defaults are as follows:
15 seconds for the handshake
timer,
60 seconds for the quiet timer,
3600 seconds for the periodic
re-authentication timer,
100 seconds for the server timeout
timer,
30 seconds for the client timeout
timer, and
30 seconds for the username
request timeout timer.
Optional
Disabled by default

Hide quick links:

Advertisement

Chapters

Table of Contents
loading

Table of Contents