R0106-HP MSR Router Series Security Command Reference(V7)

144
Views
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only after the server assigns the Radius-request action attribute to the
authenticated MAC authentication user (see "display mac-authentication connection")
. The access
device will reauthenticate the user when the session timeout timer expires.
If no server is reachable for MAC reauthentication, the device logs off the user or keeps it online,
depending on the mac-authentication re-authenticate server-unreachable keep-online command
setting on the device.
Examples
# Enable the keep-online feature for authenticated MAC authentication users on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] mac-authentication re-authenticate server-unreachable
keep-online
Related commands
display mac-authentication
mac-authentication timer
Use mac-authentication timer to set the MAC authentication timers.
Use undo mac-authentication timer to restore the defaults.
Syntax
mac-authentication timer { offline-detect offline-detect-value | quiet quiet-value | server-timeout
server-timeout-value }
undo mac-authentication timer { offline-detect | quiet | server-timeout }
Default
The offline detect timer is 300 seconds, the quiet timer is 60 seconds, and the server timeout timer is 100
seconds.
Views
System view
Predefined user roles
network-admin
Parameters
offline-detect offline-detect-value: Sets the offline detect timer in the range of 60 to 65535, in seconds.
quiet quiet-value: Sets the quiet timer in the range of 1 to 3600, in seconds.
server-timeout server-timeout-value: Sets the server timeout timer in the range of 100 to 300, in seconds.