Advanced 802.1X Configuration - 3Com 4200G 12-Port Configuration Manual

160 C 21: 802.1
HAPTER
Advanced 802.1x
Configuration
Prerequisites
Configuring Proxy
Checking
C
X ONFIGURATION
Table 123 Configure 802.1x timers and the maximum number of users (Continued)
Operation
Configure 802.1x
timers
Trigger the
quiet-period timer
As for the dot1x max-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can also
use this command in port view. In this case, this command applies to the current port
only and the interface-list argument is not needed.
As for the configuration of 802.1x timers, the default values are recommended.
Advanced 802.1x configurations, as listed below, are all optional.
CAMS cooperation configuration, including multiple network adapters detecting,
■
proxy detecting, and so on.
Client version checking configuration
■
Static IP address checking configuration
■
Guest VLAN configuration
■
Configuration of basic 802.1x
This function needs the support of 802.1x client program and CAMS, as listed below.
The 802.1x clients must be able to check whether multiple network cards, proxy
■
servers, or IE proxy servers are used on the user devices.
On CAMS, enable the function that forbids clients from using multiple network
■
cards, a proxy server, or an IE proxy.
By default, the use of multiple network cards, proxy server, and IE proxy are allowed
on 802.1x client. If you specify CAMS to disable use of multiple network cards, proxy
server, and IE proxy, CAMS sends messages to 802.1x client to request the latter to
disable the use of multiple network cards, proxy server, and IE proxy when a user
passes the authentication.
Table 124 Configure user proxy checking
Operation
Enter system view
Enable user checking and
control for users logging in
through proxies
Command
dot1x timer
{ handshake-period
handshake-period-value |
quiet-period quiet-period-value |
tx-period tx-period-value |
supp-timeout
supp-timeout-value |
server-timeout
server-timeout-value | ver-period
ver-period-value }
dot1x quiet-period
Command
system-view
dot1x supp-proxy-check
{ logoff | trap } [ interface
interface-list ]
Description
Optional
The default values of 802.1x timers
are as follows:
handshake-period-value: 15
seconds
quiet-period-value: 60 seconds
tx-period-value: 30 seconds
supp-timeout-value: 30 seconds
server-timeout-value: 100 seconds
ver-period-value: 30 seconds
Optional
By default, a quiet-period timer is
disabled.
Description
—
Optional