By default, an 802.1x user enters the quiet state after three authentication failures within 60
seconds.
----End
5.3.12 (Optional) Configuring 802.1x Re-authentication
The AR1200-S re-authenticates users who have been authenticated after a period of time to
ensure validity of users.
Context
802.1x re-authentication can be enabled in the system view or interface view.
Procedure
l Enabling 802.1x re-authentication in the system view
1. Run:
system-view
The system view is displayed.
2. Run:
dot1x reauthenticate interface { interface-type interface-number1 [ to
interface-number2 ] } &<1-10>
802.1x re-authentication is enabled on an interface.
By default, 802.1x re-authentication is disabled on an interface.
3. (Optional) Run:
dot1x timer reauthenticate-period reauthenticate-period-value
The re-authentication interval is set.
After 802.1x re-authentication is enabled on an interface, the default re-authentication
interval is 3600s.
l Enabling 802.1x re-authentication in the interface view
1. Run:
system-view
The system view is displayed.
2. (Optional) Run:
dot1x timer reauthenticate-period reauthenticate-period-value
The re-authentication interval is set.
After 802.1x re-authentication is enabled on an interface, the default re-authentication
interval is 3600s.
3. Run:
interface interface-type interface-number
The interface view is displayed.
4. (Optional) Run:
dot1x reauthenticate
Re-authentication is enabled on the interface.
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 5 NAC Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
108