R211x-HP Flexfabric 11900 Security Command Reference

106
mdc-admin
Parameters
max-retry-value: Specifies the maximum number of attempts for sending an authentication request to a
client. The value range is 1 to 10.
Usage guidelines
After the network access device sends an authentication request to a client, if the device receives no
response from the client within the username request timeout timer (set with the dot1x timer tx-period
tx-period-value command for the EAP-Request/Identity packet) or the client timeout timer (set with the
dot1x timer supp-timeout supp-timeout-value command for the EAP-Request MD5 Challenge packet), the
device retransmits the authentication request. The network access device stops retransmitting the request,
if it has made the maximum number of request transmission attempts but still received no response.
Examples
# Set the maximum number of attempts for sending an authentication request to a client to 9.
<Sysname> system-view
[Sysname] dot1x retry 9
Related commands
• display dot1x
• dot1x timer
dot1x timer
Use dot1x timer to set 802.1X timers.
Use undo dot1x timer to restore the defaults.
Syntax
dot1x timer { handshake-period handshake-period-value | quiet-period quiet-period-value |
reauth-period reauth-period-value | server-timeout server-timeout-value | supp-timeout
supp-timeout-value | tx-period tx-period-value }
undo dot1x timer { handshake-period | quiet-period | reauth-period | server-timeout | supp-timeout
| tx-period }
Default
The following timers apply:
• Handshake timer: 15 seconds.
• Quiet timer: 60 seconds.
• Periodic re-authentication timer: 3600 seconds.
• Server timeout timer: 100 seconds.
• Client timeout timer: 30 seconds.
• Username request timeout timer: 30 seconds.
Views
System view
Predefined user roles
network-admin