3com 4210 PWR 9-Port 3CR17341-91-ME ユーザーズマニュアル
製品コード
3CR17341-91-ME
Basic 802.1x Configuration
225
from them in handshaking periods. To prevent users being falsely considered
offline, you need to disable the online user handshaking function in this case.
offline, you need to disable the online user handshaking function in this case.
■
For the handshaking packet secure function to take effect, the clients that
enable the function need to cooperate with the authentication server. If either
the clients or the authentication server does not support the function, disabling
the handshaking packet secure function is needed.
enable the function need to cooperate with the authentication server. If either
the clients or the authentication server does not support the function, disabling
the handshaking packet secure function is needed.
Timer and Maximum
User Number
Configuration
n
■
As for the dot1x max-user command, if you execute it in system view without
specifying the interface-list argument, the command applies to all ports. You
can also use this command in port view. In this case, this command applies to
the current port only and the interface-list argument is not needed.
specifying the interface-list argument, the command applies to all ports. You
can also use this command in port view. In this case, this command applies to
the current port only and the interface-list argument is not needed.
Table 163 Configure 802.1x timers and the maximum number of users
Operation
Command
Remarks
Enter system view
system-view
-
Set the
maximum
number of
concurren
t on-line
users for
specified
ports
maximum
number of
concurren
t on-line
users for
specified
ports
In system
view
view
dot1x max-user user-number [
interface interface-list ]
interface interface-list ]
Optional
By default, a port can
accommodate up to 256 users at
a time.
accommodate up to 256 users at
a time.
In port
view
view
interface interface-type
interface-number
interface-number
dot1x max-user user-number
quit
Set the maximum retry
times to send request
packets
times to send request
packets
dot1x retry max-retry-value
Optional
By default, the maximum retry
times to send a request packet is
2. That is, the authenticator
system sends a request packet to
a supplicant system for up to two
times by default.
times to send a request packet is
2. That is, the authenticator
system sends a request packet to
a supplicant system for up to two
times by default.
Set 802.1x timers
dot1x timer {
handshake-period
handshake-period-value |
quiet-period quiet-period-value
| server-timeout
server-timeout-value |
supp-timeout
supp-timeout-value | tx-period
tx-period-value | ver-period
ver-period-value }
handshake-period
handshake-period-value |
quiet-period quiet-period-value
| server-timeout
server-timeout-value |
supp-timeout
supp-timeout-value | tx-period
tx-period-value | ver-period
ver-period-value }
Optional
The settings of 802.1x timers are
as follows.
as follows.
■
handshake-period-value:
15 seconds
15 seconds
■
quiet-period-value: 60
seconds
seconds
■
server-timeout-value: 100
seconds
seconds
■
supp-timeout-value: 30
seconds
seconds
■
tx-period-value: 30
seconds
seconds
■
ver-period-value: 30
seconds
seconds
Enable the
quiet-period timer
quiet-period timer
dot1x quiet-period
Optional
By default, the quiet-period timer
is disabled.
is disabled.