H3C S7500E Series Operation Manual page 812

Operation Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches
Set the maximum number
of attempts to send an
authentication request to a
supplicant
Set timers
Enable the quiet timer
Enable detection and
control of users logging in
through proxies globally
Note that:
For 802.1x to take effect on a port, you must enable it both globally in system view
and for the port in system view or Ethernet interface view.
You can also enable 802.1x and set port access control parameters (that is, the
port access control mode, port access method, and the maximum number of users)
for a port in Ethernet interface view. For detailed configuration, refer to
802.1x for a
configuring 802.1x for a port lies in the applicable scope. If both a global setting
and a local setting exist for an argument of a port, the last configured one is in
effect.
For the 802.1x proxy detection function to take effect on a port, you need to enable
the function both globally in system view and for intended ports in system view or
Ethernet interface view. Besides, this function needs the cooperation of H3C
802.1x client.
Generally, it is unnecessary to change 802.1x timers unless in some special or
extreme network environments.
To do...
dot1x retry
max-retry-value
dot1x timer
{ handshake-period
handshake-period-value
| quiet-period
quiet-period-value |
server-timeout
server-timeout-value |
supp-timeout
supp-timeout-value |
tx-period
tx-period-value }
dot1x quiet-period
dot1x
supp-proxy-check
{ logoff | trap }
[ interface
interface-list ]
Port. The only difference between configuring 802.1x globally and
Use the command...
1-14
Chapter 1 802.1x Configuration
Remarks
Optional
2 by default
Optional
The defaults are as
follows:
15 seconds for the
handshake timer,
60 seconds for the quiet
timer,
100 seconds for the
server timeout timer,
30 seconds for the
supplicant timeout timer,
and
30 seconds for the
username request timeout
timer.
Optional
Disabled by default
Optional
Disabled by default
Configuring