Configuring The Unicast Trigger Function - H3C S5600 Series Operation Manual

To do...
Set the maximum
number of retires to send
version checking request
packets
Set the client version
checking period timer
As for the dot1x version-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
execute this command in port view. In this case, this command applies to the current port
only and the interface-list argument is not needed.

Configuring the Unicast Trigger Function

The device can trigger authentication for clients that cannot send EAPOL-Start packets
and therefore cannot trigger authentication, for example, the 802.1X client provided by
Windows XP. Based on the differences in packet transmission mode, unsolicited triggering
of the device falls into two categories:
Multicast triggering mode: The device multicasts EAP-Request/Identify packets
periodically to clients.
Unicast triggering mode: The device deems that a new user is attached to itself upon
receiving a data frame on a port with the source MAC address not included in the MAC
address table. In this case, the device sends a unicast packet out the port to trigger
802.1X authentication.
With the 802.1X unicast trigger function enabled, the device sends unicast packets out a
port on which it received a data frame whose source MAC address is not listed in the MAC
address table.
Follow these steps to configure the unicast trigger function:
To do...
Enter system view
Enter Ethernet interface view
Enable the unicast trigger
function
Use the command...
dot1x version-check
quit
dot1x retry-version-max
max-retry-version-value
dot1x timer ver-period
ver-period-value
Use the command...
system-view
interface interface-type
interface-number
dot1x unicast-trigger
1-20
Remarks
Optional
By default, the maximum number
of retires to send version checking
request packets is 3.
Optional
By default, the timer is set to 30
seconds.
Remarks
—
—
Optional
Disabled by default