3com 5500-SI Manual Do Utilizador

Página de 686
400 
C
HAPTER
 21: 802.1
X
 C
ONFIGURATION
the supplicant system. Such a process goes on and on until the maximum number of 
retries is reached. If the maximum number of retries is reached and the supplicant 
system still does not respond, the switch ceases checking the client version of the 
supplicant system and continues the followed authentication procedures.
Configuring the Version
Checking Timer
It is recommended that you adopt the default version checking timer setting.
802.1x Client Version
Checking Configuration
Example
Network requirements
The 802.1x client version checking function is enabled on all ports.
Configure the maximum number of retires to send version checking request 
packets to be 6.
Set the version checking timer to 5 seconds.
Configuration procedures
Enter system view.
<S5500> system-view
Enable the 802.1x client version checking function on all ports.
[S5500] dot1x version-check
Configure the maximum number of retires to send version checking request packets 
to be 6.
[S5500] dot1x retry-version-max 6
Set the version checking timer to 5 seconds.
[S5500] dot1x timer ver-period 5
Guest VLAN
Configuration
The Guest VLAN function enables supplicant systems that are not authenticated to 
access specific resources and thus perform the corresponding operations, such as 
obtaining 802.1x client, upgrading client, or obtaining other upgrading programs.
With the Guest VLAN function enabled, supplicant systems that do not have 802.1x 
client installed can access specific network resources. And those that have 802.1x 
client installed can upgrade their 802.1x clients without being authenticated.
Table 424   Configure the maximum number of retires to send version checking request 
packets
Operation
Command
Description
Enter system view
system-view
Configure the 
maximum number of 
retires to send version 
checking request 
packets
dot1x retry-version-max 
max-retry-version-value
Optional
By default, the maximum number of 
retires to send version checking 
request packets is 3.
Table 425   Configure the version checking timer
Operation
Command
Description
Enter system view
system-view
Configure the version 
checking timer
dot1x timer ver-period 
ver-period-value
Optional
By default, the version checking 
timer is set to 30 seconds.