H3C MSR Series Command Reference

186
• Quiet timer (quiet-period)—Starts when a client fails authentication. The access device must
wait the time period before it can process the authentication attempts from the client.
• Periodic reauthentication timer (reauth-period)—Sets the interval at which the network
device periodically reauthenticates online 802.1X users. To enable periodic online user
reauthentication on a port, use the dot1x re-authenticate command.
• Server timeout timer (server-timeout)—Starts when the access device sends a RADIUS
Access-Request packet to the authentication server. If no response is received when this timer
expires, the access device retransmits the request to the server.
• Client timeout timer (supp-timeout)—Starts when the access device sends an
EAP-Request/MD5-Challenge packet to a client. If no response is received when this timer
expires, the access device retransmits the request to the client.
• Username request timeout timer (tx-period)—Starts when the device sends an
EAP-Request/Identity packet to a client in response to an authentication request. If the device
does not receive a response before this timer expires, it retransmits the request. The timer also
sets the interval at which the network device sends multicast EAP-Request/Identity packets to
detect clients that cannot actively request authentication.
The change to the periodic reauthentication timer applies to the users that have been online only
after the old timer expires. Other timer changes take effect immediately on the device.
Examples
# Set the server timeout timer to 150 seconds.
<Sysname> system-view
[Sysname] dot1x timer server-timeout 150
Related commands
display dot1x
dot1x unicast-trigger
Use dot1x unicast-trigger to enable the 802.1X unicast trigger feature.
Use undo dot1x unicast-trigger to disable the 802.1X unicast trigger feature.
Syntax
dot1x unicast-trigger
undo dot1x unicast-trigger
Default
The 802.1X unicast trigger feature is disabled.
Views
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
The unicast trigger feature enables the access device to initiate 802.1X authentication when the
device receives a data frame from an unknown source MAC address. The device sends a unicast
EAP-Request/Identity packet to the unknown source MAC address. It will retransmit the packet if it
does not receive any responses within a period of time (set by using the dot1x timer tx-period
command). This process continues until the maximum number of request attempts (set by using the
dot1x retry command) is reached.

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS