Administrator Guide
Parameter Description
[timeoutretry=<number value of retry times when 8021x
authentication timeout>]
[fasteap={EAP-MSCHAPV2, EAP-GTC}]
[fastidentity={Identity for EAP_FAST}]
[fastmschapun={username for EAP-FAST/EAP-
MSCHAPV2}]
[fastpmschappwd={password for EAP-FAST/EAP-
MSCHAPV2}]
[fastmschappwdEnc={password encrypted for EAP-FAST/
EAP-MSCHAPV2}]
[fastmschapdm={domain for EAP-FAST/EAP-MSCHAPV2}]
[fastmschaphidedm={yes,no}]
[fastsinglesignon={yes, no}]
[fastgtcun={username for EAP-FAST/EAP-GTC}]
[fastgtcpwd={password for EAP-FAST/EAP-GTC}]
[fastgtcpwdEnc={password for encrypted for EAP-FAST/
EAP-GTC}]
[wiredreset={yes, no}]
If fastmschaphidedm is set to yes, the domain uses saved EAP_FAST
MSCHAP domain name, and the prompts dialog does not include the
domain eld when you perform ieee8021x authentication.
The following example describes wildcard server
validation:IEEE8021X=yes network=WIRED access=WPA2-ENT
servervalidate=yes eap=yes eaptype=EAP-FAST servercheck=yes
servername=w2k8-ACS-64.sqawirelsess.com fastmschapdm=EAP-
MSCHAPV2 fastgtcun=sqawirless2 fastmschappwd=123!@#qwe
The option wiredreset is used to reset MII when authenticate cancel
occurs. This option is only for wired-network and is disabled by default.
INACTIVE = minutes
[NoSessionTimer=minutes]
[LockTimer=seconds]
Default is 0.
There is no Idle timeout. The range is 0 minutes to 480 minutes. If the
value given is bigger than 480, 480 is set instead. If the value given is
smaller than 0, 0 is set instead.
When the system idle is time out in the congured minutes, the system
will automatically sign o, reboot or shutdown which are based on the
setting of AutoSigno.
The parameter NoSessionTimer has the same range as INACTIVE and it is
valid only if INACTIVE value is not 0. If there is a session use the value of
Inactive, otherwise use the value of NoSessionTimer, if NoSessionTimer is
congured.
If AutoSigno=yes Shutdown=yes is congured, then this statement can
work before sign on.
f the parameter LockTimer is set, the terminal is locked and the system
idle is timeout in the congured seconds, system will automatically sign
o, reboot or shutdown which are based on the setting of AutoSigno.
IPProto=ICMP
[DisableTStamp={yes, no}]
[DisableEcho={yes, no}]
Congures the ICMP protocol.
DisableTStamp — If DisableTStamp=yes, the system will not reect the
ICMP timestamp (13) request.
DisableEcho — If DisableEcho=yes, the system will not reect the ICMP
echo (8) request. In this case, the unit cannot be pinged.
KeySequence={no, yes}
[Ctrl+Alt+Del={no,yes}]
Default is yes.
194 Creating and Using xen.ini Files