3Com SuperStack 4 Configuration Manual page 252

264 C 11: 802.1
HAPTER
Configuring the
Authentication Method
for 802.1x User
Setting the Maximum
Times of Authentication
Request Message
Retransmission
Configuring Timers
C
X ONFIGURATION
Operation
Enable the switch to trigger the
authentication over them
By default, the Switch can trigger the user ID authentication over the users who
configure static IP addresses in DHCP environment.
The following commands can be used to configure the authentication method for
802.1x user. Three methods are available: PAP authentication (the RADIUS server
must support PAP authentication), CHAP authentication (the RADIUS server must
support CHAP authentication), EAP relay authentication (the Switch sends
authentication information to the RADIUS server in the form of EAP packets
directly and the RADIUS server must support EAP authentication).
Perform the following configurations in System View.
Table 290 Configuring the Authentication Method for 802.1x User
Operation
Configure authentication method
for 802.1x user
Restore the default authentication
method for 802.1x user
By default, CHAP authentication is used for 802.1x user authentication.
The following commands are used for setting the maximum retransmission times
of the authentication request message that the Switch sends to the user.
Perform the following configurations in System View.
Table 291 Setting the Maximum Times of the Authentication Request Message
Retransmission
Operation
Set the maximum times of the authentication
request message retransmission
Restore the default maximum retransmission times undo dot1x retry
By default, the max-retry-value is 2. That is, the Switch can retransmit the
authentication request message to a user for a maximum of 2 times.
The following commands are used for configuring the 802.1x timers.
Perform the following configurations in System View.
Table 292 Configuring Timers
Operation
Configure timers
Command
undo dot1x dhcp-launch
Command
dot1x authentication-method { chap |
pap | eap md5-challenge}
undo dot1x authentication-method
Command
dot1x timer { { handshake-period
handshake-period-value
quiet_period_value
supp-timeout supp_timeout_value
server_timeout_value
Command
dot1x retry max_retry_value
| quiet-period
tx_period_value
| tx-period
| server-timeout
}
|