R211x-HP Flexfabric 11900 Security Command Reference

115
Predefined user roles
network-admin
mdc-admin
Parameters
offline-detect offline-detect-value: Sets the offline detect timer in the range of 60 to 65535, in seconds.
quiet quiet-value: Sets the quiet timer in the range of 1 to 3600, in seconds.
server-timeout server-timeout-value: Sets the server timeout timer in the range of 100 to 300, in seconds.
Usage guidelines
MAC authentication uses the following timers:
• Offline detect timer—Sets the interval that the device waits for traffic from a user before it regards
the user idle. If a user connection has been idle within the interval, the device logs the user out and
stops accounting for the user.
• Quiet timer—Sets the interval that the device must wait before it can perform MAC authentication
for a user who has failed MAC authentication. All packets from the MAC address are dropped
during the quiet time. This quiet mechanism prevents repeated authentication from affecting system
performance.
• Server timeout timer—Sets the interval that the device waits for a response from a RADIUS server
before it regards the RADIUS server unavailable. If the timer expires during MAC authentication,
the user cannot access the network.
Examples
# Set the server timeout timer to 150 seconds.
<Sysname> system-view
[Sysname] mac-authentication timer server-timeout 150
Related commands
display mac-authentication
mac-authentication timer auth-delay
Use mac-authentication timer auth-delay to enable MAC authentication delay and set the delay time.
Use undo mac-authentication timer auth-delay to restore the default.
Syntax
mac-authentication timer auth-delay time
undo mac-authentication timer auth-delay
Default
MAC authentication delay is disabled.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin