Command Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches Chapter 1 802.1x Configuration Commands
1-17
Several timers are used in the 802.1x authentication process to guarantee that the
supplicants, the authenticators, and the RADIUS server interact with each other in a
reasonable manner. You can use this command to set these timers:
z Handshake timer (handshake-period): After a supplicant passes authentication,
the authenticator sends to the supplicant handshake requests at this interval to
check whether the supplicant is online. If the authenticator receives no response
after sending the allowed maximum number of handshake requests, it considers
that the supplicant is offline.
z Quiet timer (quiet-period): When a supplicant fails the authentication, the
authenticator refuses further authentication requests from the supplicant in this
period of time.
z Server timeout timer (server-timeout): Once an authenticator sends a RADIUS
Access-Request packet to the authentication server, it starts this timer. If this timer
expires but it receives no response from the server, it retransmits the request.
z Supplicant timeout timer (supp-timeout): Once an authenticator sends an
EAP-Request/MD5 Challenge frame to a supplicant, it starts this timer. If this timer
expires but it receives no response from the supplicant, it retransmits the request.
z Username request timeout timer (tx-period): Once an authenticator sends an
EAP-Request/Identity frame to a supplicant, it starts this timer. If this timer expires
but it receives no response from the supplicant, it retransmits the request. In
addition, to be compatible with clients that do not send EAPOL-Start requests
unsolicitedly, the device multicasts EAP-Request/Identity frame periodically to
detect the clients, with the multicast interval defined by tx-period.
Generally, it is unnecessary to change the timers unless in some special or extreme
network environments.
Related commands: display dot1x.
Examples
# Set the server timeout timer to 150 seconds.
<Sysname> system-view
[Sysname] dot1x timer server-timeout 150
1.1.14 reset dot1x statistics
Syntax
reset dot1x statistics [ interface interface-list ]
View
User view
To Next Page
Loading...
Need help?
General
