352 CHAPTER 11: USING AAA AND RADIUS COMMANDS
only if you enable this feature on a specific port can this configuration take effect
on the port.
Related command: display dot1x.
Example
To configure the Switch to cut the network connection to a user upon detecting
the use of proxy on GigabitEthernet 1/0/1 ~ GigabitEthernet 1/0/8, enter the
following:
<SW5500>system-view
System View: return to User View with Ctrl+Z.
[SW5500]dot1x supp-proxy-check logoff
[SW5500]dot1x supp-proxy-check logoff interface GigabitEthernet
1/0/1 to GigabitEthernet 1/0/8
To configure the Switch to send a trap message upon detecting the use of proxy to
login to GigabitEthernet 1/0/9, enter the following:
[SW5500]dot1x supp-proxy-check trap
[SW5500]dot1x supp-proxy-check trap interface GigabitEthernet 1/0/9
or
[SW5500]dot1x supp-proxy-check trap
[SW5500]interface GigabitEthernet 1/0/9
[SW5500-GigabitEthernet1/0/9]dot1x supp-proxy-check trap
dot1x timer Syntax
dot1x timer { handshake-period
handshake-period-value
| quiet-period
quiet-period-value
| tx-period
tx-period-value
| supp-timeout
supp-timeout-value
| server-timeout
server-timeout-value
}
undo dot1x timer { handshake-period | quiet-period | tx-period |
supp-timeout | server-timeout }
View
System View
Parameter
handshake-period: This timer begins after the user has passed authentication.
After setting the handshake-period, the system will send a handshake packet
every handshake period seconds. Suppose the dot1x handshake-period time is
configured as N, the system will consider the user as having logged off and will set
the user state as logoff if the system does not receive a response from the user for
N consecutive times.
handshake-period-value
: Handshake period. The value ranges from 1 to 1024 in
units of second and defaults to 15.
quiet-period: Specify the quiet timer. If an 802.1x user has not passed the
authentication, the Authenticator will keep quiet for a while (which is specified by
quiet-period timer) before launching the authentication again. During the quiet
period, the Authenticator does not do anything related to 802.1x authentication.
To Next Page
Loading...
