Timer And Maximum User Number Configuration - H3C S5100-SI Operation Manual

802.1x configurations take effect only after you enable 802.1x both globally and for
specified ports.
The settings of 802.1x and MAC address learning limit are mutually exclusive.
Enabling 802.1x on a port will prevent you from setting the limit on MAC address
learning on the port and vice versa.
The settings of 802.1x and aggregation group member are mutually exclusive.
Enabling 802.1x on a port will prevent you from adding the port to an aggregation group
and vice versa.
When a device operates as an authentication server, its authentication method for
802.1x users cannot be configured as EAP.
With the support of the H3C proprietary client, handshake packets are used to test
whether or not a user is online.
As clients that are not of H3C do not support the online user handshaking function,
switches cannot receive handshake acknowledgement packets from them in
handshaking periods. To prevent users being falsely considered offline, you need to
disable the online user handshaking function in this case.
The handshake packet protection function requires the cooperation of the client and
the authentication server. If either of the two ends does not support the function, you
need to disable it on the other one.

Timer and Maximum User Number Configuration

Follow these steps to configure 802.1x timers and the maximum number of users:
To do...
Enter system view
Set the
maximum
number of
concurrent
on-line
users for
specified
ports
Set the maximum retry
times to send request
packets
Use the command...
system-view
dot1x max-user
In system
user-number [ interface
view
interface-list ]
interface interface-type
interface-number
In port
dot1x max-user
view
user-number
quit
dot1x retry max-retry-value
—
Optional
By default, a port can
accommodate up to 256
users at a time.
Optional
By default, the maximum
retry times to send a request
packet is 2. That is, the
authenticator system sends
a request packet to a
supplicant system for up to
two times by default.
1-16
Remarks