H3C S7500 Series Ethernet Switches Command Manual

Command Manual – 802.1x
H3C S7500 Series Ethernet Switches Chapter 1
802.1x Configuration Commands
1-18
Parameters
handshake-period: Handshake period timer, triggered after a supplicant system has
successfully passed the authentication. The switch will periodically resend a
handshake request packet to check the supplicant system is still online at the interval of
handshake period value. If the switch still has not received any response packet from
the supplicant system in N retries (N is specified by the dot1x retry command), it will
consider the supplicant system to be offline.
handshake-period-value: Value of the handshake period timer, in seconds. This value
ranges from 1 to 1024 and defaults to 15.
reauth-period: Re-authentication period timer. The switch will initialize 802.1x
re-authentication when the re-authentication period timer times out.
reauth-period-value: Value of the re-authentication period timer, in seconds. This value
ranges from 1 to 86400 and defaults to 3600.
quiet-period: Quiet-period timer, triggered after a supplicant system has failed the
authentication. The switch will quiet for a period of time (set by the quiet-period timer)
before it processes another authentication request initiated by the supplicant system.
quiet-period-value: Value of the quiet-period timer, in seconds. This value ranges from
10 to 120 and defaults to 60.
tx-period: Tx-period timer, triggered by the authenticator system in one of the following
two cases: The first case is when a supplicant system requests for authentication. The
switch sends a unicast request/identity packet to the supplicant system and then
enables the transmission timer. The switch sends another request/identity packet to the
supplicant system if the supplicant system does not send a reply packet to the switch
when this timer times out. The second case is when the switch authenticates the 802.1x
client who does not request for authentication actively. The switch sends multicast
request/identity packets continuously through the port with 802.1x enabled at the
interval of tx-period value.
tx-period-value: Value of the tx-period timer, in seconds. This value ranges from 10 to
120 and defaults to 30.
supp-timeout: Supplicant timeout timer, triggered when the switch sends a
request/challenge packet (for MD5 ciphered text) to a supplicant system. The switch
will resend the request/challenge packet to the supplicant system if the supplicant
system has not responded when this timer times out.
supp-timeout-value: Value of the supp-timeout timer, in seconds. This value ranges
from 10 to 120 and defaults to 30.
server-timeout: Server-timeout timer. The switch will resend the request/identity
packet if the authentication server has not responded when this timer times out.
server-timeout-value: Value of the server timeout timer, in seconds. This value ranges
from 100 to 300 and defaults to 100.