Basic 802.1x Configuration 225
from them in handshaking periods. To prevent users being falsely considered
offline, you need to disable the online user handshaking function in this case.
■ For the handshaking packet secure function to take effect, the clients that
enable the function need to cooperate with the authentication server. If either
the clients or the authentication server does not support the function, disabling
the handshaking packet secure function is needed.
Timer and Maximum
User Number
Configuration
n
■ As for the dot1x max-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You
can also use this command in port view. In this case, this command applies to
the current port only and the interface-list argument is not needed.
Tab le 163 Configure 802.1x timers and the maximum number of users
Operation Command Remarks
Enter system view system-view -
Set the
maximum
number of
concurren
t on-line
users for
specified
ports
In system
view
dot1x max-user user-number [
interface interface-list ]
Optional
By default, a port can
accommodate up to 256 users at
a time.
In port
view
interface interface-type
interface-number
dot1x max-user user-number
quit
Set the maximum retry
times to send request
packets
dot1x retry max-retry-value Optional
By default, the maximum retry
times to send a request packet is
2. That is, the authenticator
system sends a request packet to
a supplicant system for up to two
times by default.
Set 802.1x timers dot1x timer {
handshake-period
handshake-period-value |
quiet-period quiet-period-value
| server-timeout
server-timeout-value |
supp-timeout
supp-timeout-value | tx-period
tx-period-value | ver-period
ver-period-value }
Optional
The settings of 802.1x timers are
as follows.
■ handshake-period-value:
15 seconds
■ quiet-period-value: 60
seconds
■ server-timeout-value: 100
seconds
■ supp-timeout-value: 30
seconds
■ tx-period-value: 30
seconds
■ ver-period-value: 30
seconds
Enable the
quiet-period timer
dot1x quiet-period Optional
By default, the quiet-period timer
is disabled.
To Next Page
Loading...
