Configuring 802.1X For A Port - HP 4800G Series Configuration Manual

To do...
Set the maximum number of
attempts to send an
authentication request to a
client
Set timers
Enable the quiet timer
Note that:
For 802.1X to take effect on a port, you must enable it both globally in system view and for the port
in system view or Ethernet interface view.
You can also enable 802.1X and set port access control parameters (that is, the port access control
mode, port access method, and the maximum number of users) for a port in Ethernet interface view.
For detailed configuration, refer to
configuring 802.1X globally and configuring 802.1X for a port lies in the applicable scope. If both a
global setting and a local setting exist for an argument of a port, the last configured one is in effect.
802.1X timers only need to be changed in special or extreme network environments. For example,
you can give the client timeout timer a higher value in a low-performance network, give the quiet
timer a higher value in a vulnerable network or a lower value for quicker authentication response, or
adjust the server timeout timer to suit the performance of the authentication server.

Configuring 802.1X for a Port

Enabling 802.1X for a port
Follow these steps to enable 802.1X for a port:
To do...
Enter system view
Enable
802.1X for
one or more
ports
Configuring 802.1X parameters for a port
Follow these steps to configure 802.1X parameters for a port:
Use the command...
dot1x retry max-retry-value
dot1x timer
{ handshake-period
handshake-period-value |
quiet-period
quiet-period-value |
server-timeout
server-timeout-value |
supp-timeout
supp-timeout-value | tx-period
tx-period-value }
dot1x quiet-period
Configuring 802.1X for a
system-view
In system view
dot1x interface interface-list
interface interface-type
In Ethernet
interface-number
interface view
dot1x
Port. The only difference between
Use the command...
1-13
Remarks
Optional
2 by default
Optional
The defaults are as follows:
15 seconds for the handshake
timer,
60 seconds for the quiet timer,
100 seconds for the server
timeout timer,
30 seconds for the client
timeout timer, and
30 seconds for the username
request timeout timer.
Optional
Disabled by default
Remarks
—
Required
Use either approach.
Disabled by default