Huawei Quidway S3500 Series User Manual

Operation Manual - Security
Quidway S3500 Series Ethernet Switches Chapter 1 802.1x Configuration
Huawei Technologies Proprietary
1-9
I. Enabling 802.1x re-authentication
Before enabling the 802.1x re-authentication, you must enable the 802.1x feature both
on the port and globally.
Perform the following in system view or Ethernet port view.
Table 1-9 Enabling/disabling 802.1x user re-authentication
Operation Command
Enable 802.1x user
re-authentication
dot1x re-authenticate [ interface
interface-list ]
Disable 802.1x user
re-authentication
undo dot1x re-authenticate [ interface
interface-list ]
By default, 802.1x re-authentication is disabled on all ports.
In system view, if the interface-list parameter is not specified, it means that to enable
the 802.1x re-authentication feature on all interfaces; if the interface-list parameter is
specified, it means that to enable the feature on the specified interfaces. In Ethernet
port view, the interface-list parameter cannot be specified, and you can use command
only to enable the feature on the current interface.
II. Configuring 802.1x re-authentication timeout timer
The period of re-authentication is decided by the following two modes:
1) The switch takes the session-timeout value in the access-accept packet as the
authentication period.
2) The switch takes the value set by the user through the dot1x reauth-period
command as the authentication period. And this period defaults to 3600 seconds.
During the authentication, the switch takes the last received one as the authentication
period. For example, after the user configured the authentication period on the switch,
the switch receives the packet with the termination-action attributes of 1, and then the
switch takes the session-timeout value in the access-accept packet as the
authentication period.
Perform the following in system view.
Table 1-10 Configuring 802.1x re-authentication timeout timer
Operation Command
Configure parameters of
the timer
dot1x timer reauth-period reauth-period-value
Return to the defaults
undo dot1x timer reauth-period
By default, reauth-period-value is 3600 seconds.

Huawei Quidway S3500 Series Specifications

General

Brand	Huawei
Model	Quidway S3500 Series
Category	Network Router
Language	English