Timer And Maximum User Number Configuration - H3C S3100 Series Operation Manual

802.1x configurations take effect only after you enable 802.1x both globally and for specified ports.
If you enable 802.1x for a port, you cannot set the maximum number of MAC addresses that can be
learnt for the port. Meanwhile, if you set the maximum number of MAC addresses that can be learnt
for a port, it is prohibited to enable 802.1x for the port.
If you enable 802.1x for a port, it is not available to add the port to an aggregation group.
Meanwhile, if a port has been added to an aggregation group, it is prohibited to enable 802.1x for
the port.
Changing the access control method on a port by the dot1x port-method command will forcibly
log out the online 802.1x users on the port.
When a device operates as an authentication server, its authentication method for 802.1x users
cannot be configured as EAP.
Handshaking packets need the support of the H3C-proprietary client. They are used to test
whether or not a user is online.
As clients that are not of H3C do not support the online user handshaking function, switches cannot
receive handshaking acknowledgement packets from them in handshaking periods. To prevent
users being falsely considered offline, you need to disable the online user handshaking function in
this case.
For the handshaking packet secure function to take effect, the clients that enable the function need
to cooperate with the authentication server. If either the clients or the authentication server does
not support the function, disabling the handshaking packet secure function is needed.

Timer and Maximum User Number Configuration

Table 1-2 Configure 802.1x timers and the maximum number of users
Operation
Enter system view
In
Set the
system
maximum
view
number of
concurrent
on-line
In port
users for
view
specified
ports
Set the maximum retry
times to send request
packets
Command
system-view
dot1x max-user user-number
[ interface interface-list ]
interface interface-type
interface-number
dot1x max-user user-number
quit
dot1x retry max-retry-value
1-16
Remarks
—
Optional
By default, a port can accommodate up
to 256 users at a time.
Optional
By default, the maximum retry times to
send a request packet is 2. That is, the
authenticator system sends a request
packet to a supplicant system for up to
two times by default.