Configuring 802.1x 727
n
■ For 802.1x to take effect on a port, you must enable it both globally in system
view and for the port in system view or Ethernet interface view.
■ You can also enable 802.1x and set port access control parameters (that is, the
port access control mode, port access method, and the maximum number of
users) for a port in Ethernet interface view. For detailed configuration, refer to
“Configuring 802.1x for a Port” on page 727. The only difference between
configuring 802.1x globally and configuring 802.1x for a port lies in the
applicable scope. If both a global setting and a local setting exist for an
argument of a port, the last configured one is in effect.
■ Generally, it is unnecessary to change 802.1x timers unless in some special or
extreme network environments.
Configuring 802.1x for a
Port
Enabling 802.1x for a port
Follow these steps to enable 802.1x for a port:
Configuring 802.1x parameters for a port
Follow these steps to configure 802.1x parameters for a port:
Set timers dot1x timer
{ handshake-period
handshake-period-value |
quiet-period
quiet-period-value |
server-timeout
server-timeout-value |
supp-timeout
supp-timeout-value |
tx-period tx-period-value }
Optional
The defaults are as follows:
15 seconds for the handshake
timer,
60 seconds for the quiet
timer,
100 seconds for the server
timeout timer,
30 seconds for the supplicant
timeout timer, and
30 seconds for the username
request timeout timer.
Enable the quiet timer dot1x quiet-period Optional
Disabled by default
To do… Use the command… Remarks
To do… Use the command… Remarks
Enter system view system-view -
Enable 802.1x
for one or
more ports
In system view dot1x interface interface-list Required
Use either approach.
Disabled by default
In Ethernet
interface view
interface interface-type
interface-number
dot1x
To do… Use the command… Remarks
Enter system view system-view -
Enter Ethernet interface view interface interface-type
interface-number
-
Set the port access control
mode for the port
dot1x port-control
{ authorized-force | auto |
unauthorized-force }
Optional
auto by default
To Next Page
Loading...
