H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – 802.1x
H3C S7500 Series Ethernet Switches
Chapter 1 802.1x Configuration
1-14
To do... Use the command... Remarks
Enable 802.1x
re-authentication
In system view:
dot1x re-authenticate [ interface
interface-list ]
In port view:
dot1x re-authenticate
Optional
Disabled by default
Caution:
z 802.1x-related configurations can all be performed in system view. Port access
control mode and port access method can also be configured in port view.
z If you perform a configuration in system view and do not specify the interface-list
argument, the configuration applies to all ports. Configurations performed in
Ethernet port view apply to the current Ethernet port only and the interface-list
argument is not needed in this case.
z 802.1x configurations take effect only after you enable 802.1x both globally and for
the specified ports.
z You can enable 802.1x re-authentication on the switch either by using the dot1x
re-authenticate command or through the RADIUS server. The switch
re-authenticates the user periodically if the Termination-Action attribute value of the
Access-Accept packet sent by the authentication server to the switch is set to 1.
1.4 Timer and Maximum User Number Configuration
Table 1-2 Configure 802.1x timers and the maximum number of users
To do... Use the command... Remarks
Enter system view
system-view
—
In system view:
dot1x max-user
user-number [ interface
interface-list ]
Configure the
maximum number
of concurrent
on-line users for
the specified ports
In port view:
dot1x max-user
user-number
Optional
By default, up to 1,024
concurrent on-line users are
allowed on each port.