Configuring The Authentication Method For 802.1X User; Setting The Maximum Times Of Authentication Request Message Retransmission; Configuring Timers - 3Com Switch 4500 26-Port Configuration Manual

194 C 11: 802.1X C
HAPTER
Configuring the
Authentication Method
for 802.1X User
Setting the Maximum
Times of Authentication
Request Message
Retransmission

Configuring Timers

ONFIGURATION
The following commands can be used to configure the authentication method for
802.1X user. Three methods are available: PAP authentication (the RADIUS server
must support PAP authentication), CHAP authentication (the RADIUS server must
support CHAP authentication), EAP relay authentication (the Switch sends
authentication information to the RADIUS server in the form of EAP packets
directly and the RADIUS server must support EAP authentication). You can use EAP
authentication in one of the four sub-methods: PEAP, EAP-TLS, EAP-TTLS and
EAP-MD5.
Perform the following configurations in System View.
Table 195 Configuring the Authentication Method for 802.1X User
Operation
Configure authentication method
for 802.1X user
Restore the default authentication
method for 802.1X user
By default, CHAP authentication is used for 802.1X user authentication.
The following commands are used for setting the maximum retransmission times
of the authentication request message that the Switch sends to the user.
Perform the following configurations in System View.
Table 196 Setting the Maximum Times of the Authentication Request Message
Retransmission
Operation
Set the maximum times of the authentication
request message retransmission
Restore the default maximum retransmission times undo dot1x retry
By default, the max-retry-value is 3. That is, the Switch can retransmit the
authentication request message to a user for a maximum of 3 times.
The following commands are used for configuring the 802.1X timers.
Perform the following configurations in System View.
Table 197 Configuring Timers
Operation
Configure timers
Restore default
settings of the timers
handshake-period:
authentication. After setting handshake-period, system will send the handshake
packet by the period. Suppose the dot1x retry time is configured as N, the system
Command
dot1x authentication-method { chap |
pap | eap }
undo dot1x authentication-method
Command
dot1x timer { { handshake-period
handshake-period-value | quiet-period
quiet_period_value | tx-period tx_period_value |
supp-timeout supp_timeout_value | server-timeout
server_timeout_value }
undo dot1x timer { handshake-period | quiet-period
| tx-period | supp-timeout | server-timeout }
This timer begins after the user has passed the
Command
dot1x retry max_retry_value