Installation manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1
802.1x Configuration
Huawei Technologies Proprietary
1-9
annot be specified, and you can use command
only to enable the feature on the current interface.
II -authentication timeout timer
o modes:
1) The switch takes the session-timeout value in the access-accept packet as the
2) The switch alue set by the user throug eriod
command as the authentication period.
D one as the authentication
peri gur ,
th erm ttributes of 1, and then the
witch takes the session-timeout value in the access-accept packet as the
authentication period.
Perform the following in system view.
port view, the interface-list parameter c
. Configuring 802.1x re
The period of re-authentication is decided by the following tw
authentication period.
takes the v h the dot1x reauth-p
And this period defaults to 3600 seconds.
the last received
uring the authentication, the switch takes
od. For example, after the user confi
e switch receives the packet with the t
ed the authentication period on the switch
ination-action a
s
Table 1-10 Configuring 802.1x re-authentication timeout timer
Operation Command
Configure parameters of
the timer
dot1x timer reauth-period reauth-period-value
Return to the defaults
undo dot1x timer reauth-period
1.2.10 Setting sion Authentication
After
I.
n authentication
By default, reauth-period-value is 3600 seconds.
802.1x Client Ver
enabling 802.1x client version authentication, the switch authenticates the version
and validity of the 802.1x client of the access user, avoiding the access of the users at
the client with the defectively old version or at the invalid client.
Enabling 802.1x client version authentication
Perform the following in system view or Ethernet port view.
Table 1-11 Setting 802.1x client versio
Operation Command
Enable 802.1x client version dot1x version-c
authenti
heck [ interface
interface-lication st ]
Disable 802.1x client versi
authentication
on undo dot1x version-check [ interface
interface-list ]