3com 4500 PWR 26-PORT User Manual

Page of 466
802.1x Configuration Commands
245
Example
To configure the Switch to cut the network connection to a user upon detecting 
the use of proxy on Ethernet 1/0/1 ~ Ethernet 1/0/8, enter the following: 
<4500>system-view
System View: return to User View with Ctrl+Z.
[4500]dot1x supp-proxy-check logoff
[4500]dot1x supp-proxy-check logoff interface Ethernet 1/0/1 to 
Ethernet 1/0/8
To configure the Switch to send a trap message upon detecting the use of proxy to 
login to Ethernet 1/0/9, enter the following: 
[4500]dot1x supp-proxy-check trap 
[4500]dot1x supp-proxy-check trap interface ethernet 1/0/9
or
[4500]dot1x supp-proxy-check trap 
[4500]interface Ethernet 1/0/9
[4500-ethernet1/0/9]dot1x supp-proxy-check trap
dot1x timer
Syntax
dot1x timer { handshake-period handshake-period-value | quiet-period 
quiet-period-value | tx-period tx-period-value | supp-timeout 
supp-timeout-value | server-timeout server-timeout-value }
undo dot1x timer { handshake-period | quiet-period | tx-period | 
supp-timeout | server-timeout }
View
System View
Parameter
handshake-period
: This timer begins after the user has passed authentication. 
After setting the handshake-period, the system will send a handshake packet 
every handshake period seconds. Suppose the dot1x handshake-period time is 
configured as N, the system will consider the user as having logged off and will set 
the user state as logoff if the system does not receive a response from the user for 
N consecutive times.
handshake-period-value
: Handshake period. The value ranges from 1 to 1024 in 
units of second and defaults to 15.
quiet-period:
 Specify the quiet timer. If an 802.1x user has not passed the 
authentication, the Authenticator will keep quiet for a while (which is specified by 
quiet-period timer) before launching the authentication again. During the quiet 
period, the Authenticator does not do anything related to 802.1x authentication.
quiet-period-value:
 Specify how long the quiet period is. The value ranges 
from 10 to 120 in units of second and defaults to 60.
server-timeout:
 Specify the timeout timer of an Authentication Server. If an 
Authentication Server has not responded before the specified period expires, the 
Authenticator will resend the authentication request.