H3C S7500 Series Operation Manual page 512

Operation Manual – 802.1x
H3C S7500 Series Ethernet Switches
To do...
Configure the
maximum retry
times to send a
request packet
Configure 802.1x
timers
Start the
quiet-period timer
Note:
As for the dot1x max-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You can
also use this command in port view. In this case, this command applies to the
current port only and the interface-list argument is not needed.
As for the configuration of 802.1x timers, the default values are recommended.
You can set 802.1x re-authentication timer on the switch either by using the dot1x
reauth-period command or through the RADIUS server. Upon receiving an
Access-Accept packet, with Termination-Action attribute value set to 1, from the
server, the switch performs authentication at an interval of the session-timeout
value of the Access-Accept packet. In actual authentication, the switch uses the
latest time value obtained as the authentication period.
Use the command...
dot1x retry max-retry-value
dot1x timer
{ handshake-period
handshake-period-value |
reauth-period
reauth-period-value |
quiet-period
quiet-period-value |
tx-period tx-period-value |
supp-timeout
supp-timeout-value |
server-timeout
server-timeout-value |
ver-period
ver-period-value }
dot1x quiet-period
1-15
Chapter 1 802.1x Configuration
Remarks
Optional
By default, max-retry-value is
2. That is, the authenticator
system is allowed to send a
request packet to a supplicant
system up to two times.
Optional
The default values of 802.1x
timers are as follows:
handshake-period-value:
15 seconds
reauth-period-value: 3,600
seconds
quiet-period-value:
seconds
tx-period-value:
seconds
supp-timeout-value:
seconds
server-timeout-value: 100
seconds
ver-period-value:
seconds
Optional
By default, the quiet-period
timer is disabled.
60
30
30
30