X Implementation On An S3900 Series Switch - Huawei Quidway S3900 Series Operation Manual

Operation Manual – 802.1x
Quidway S3900 Series Ethernet Switches-Release 1510
another request/identity packet to the supplicant system if the supplicant system
fails to send a reply packet to the switch when this timer times out. The second
case is when the switch authenticates the 802.1x client who does not request for
authentication actively. The switch sends multicast request/identity packets
continuously through the port enabled with 802.1x function, with the interval of
tx-period.
Supplicant system timer (supp-timeout): This timer sets the supp-timeout period
and is triggered by the switch after the switch sends a request/challenge packet to
a supplicant system. The switch sends another request/challenge packet to the
supplicant system if the supplicant system fails to respond when this timer times
out.
RADIUS server timer (server-timeout): This timer sets the server-timeout period.
The switch sends another authentication request packet if the RADIUS server fails
to respond when this timer times out.
Handshake timer (handshake-period): This timer sets the handshake-period and
is triggered after a supplicant system passes the authentication. It sets the interval
for a switch to send handshake request packets to online users. If you set the
number of retries to N by using the dot1x retry command, an online user is
considered offline when the switch does not receive response packets from it in a
period N times of the handshake-period.
Quiet-period timer (quiet-period): This timer sets the quiet-period. When a
supplicant system fails to pass the authentication, the switch quiets for the set
period (set by the quiet-period timer) before it processes another authentication
request re-initiated by the supplicant system.
ver-period: This timer sets the client version request timer. If the supplicant
system does not send the version response packets within the set period, the
switch sends another version request packet.

1.1.6 802.1x Implementation on an S3900 Series Switch

In addition to the earlier mentioned 802.1x features, an S3900 series switch is also
capable of the following:
Cooperating with a CAMS server to check supplicant systems for proxies, multiple
network adapters, and so on.
Checking client version
Implementing the Guest VLAN function
I. Checking the supplicant system
An S3900 series switch checks:
Supplicant systems logging on through proxies
Supplicant systems logging on through IE proxies
Huawei Technologies Proprietary
1-10
Chapter 1 802.1x Configuration