Administrator Guide

Parameter Description
[timeoutretry=<number value of retry times when 8021x
authentication timeout>]
[fasteap={EAP-MSCHAPV2, EAP-GTC}]
[fastidentity={Identity for EAP_FAST}]
[fastmschapun={username for EAP-FAST/EAP-
MSCHAPV2}]
[fastpmschappwd={password for EAP-FAST/EAP-
MSCHAPV2}]
[fastmschappwdEnc={password encrypted for EAP-FAST/
EAP-MSCHAPV2}]
[fastmschapdm={domain for EAP-FAST/EAP-MSCHAPV2}]
[fastmschaphidedm={yes,no}]
[fastsinglesignon={yes, no}]
[fastgtcun={username for EAP-FAST/EAP-GTC}]
[fastgtcpwd={password for EAP-FAST/EAP-GTC}]
[fastgtcpwdEnc={password for encrypted for EAP-FAST/
EAP-GTC}]
[wiredreset={yes, no}]
If fastmschaphidedm is set to yes, the domain uses saved EAP_FAST
MSCHAP domain name, and the prompts dialog does not include the
domain eld when you perform ieee8021x authentication.
The following example describes wildcard server
validation:IEEE8021X=yes network=WIRED access=WPA2-ENT
servervalidate=yes eap=yes eaptype=EAP-FAST servercheck=yes
servername=w2k8-ACS-64.sqawirelsess.com fastmschapdm=EAP-
MSCHAPV2 fastgtcun=sqawirless2 fastmschappwd=123!@#qwe
The option wiredreset is used to reset MII when authenticate cancel
occurs. This option is only for wired-network and is disabled by default.
INACTIVE = minutes
[NoSessionTimer=minutes]
[LockTimer=seconds]
Default is 0.
There is no Idle timeout. The range is 0 minutes to 480 minutes. If the
value given is bigger than 480, 480 is set instead. If the value given is
smaller than 0, 0 is set instead.
When the system idle is time out in the congured minutes, the system
will automatically sign o, reboot or shutdown which are based on the
setting of AutoSigno.
The parameter NoSessionTimer has the same range as INACTIVE and it is
valid only if INACTIVE value is not 0. If there is a session use the value of
Inactive, otherwise use the value of NoSessionTimer, if NoSessionTimer is
congured.
If AutoSigno=yes Shutdown=yes is congured, then this statement can
work before sign on.
f the parameter LockTimer is set, the terminal is locked and the system
idle is timeout in the congured seconds, system will automatically sign
o, reboot or shutdown which are based on the setting of AutoSigno.
IPProto=ICMP
[DisableTStamp={yes, no}]
[DisableEcho={yes, no}]
Congures the ICMP protocol.
DisableTStamp — If DisableTStamp=yes, the system will not reect the
ICMP timestamp (13) request.
DisableEcho — If DisableEcho=yes, the system will not reect the ICMP
echo (8) request. In this case, the unit cannot be pinged.
KeySequence={no, yes}
[Ctrl+Alt+Del={no,yes}]
Default is yes.
194 Creating and Using xen.ini Files