Installation manual

Operation Manual - Security
Quidway S3000-EI Series Ethernet Switches Chapter 1
802.1x Configuration
Huawei Technologies Proprietary
1-14
timeout timer of an Authentication Server. If an
Authe rver has not responded befo ified period expires, the
Authenticator will resend the authentication reque
server-timeout-value: S
A er is
defaults to 100 seconds.
supp-timeout: Specify
A
encrypted te the Authenticator begins to run. If the
upplicant does not respond back successfully within the time range set by this timer,
the Authenticator will resend the above packet.
hich requests the user name or user name and
password together, the tx-period timer of the Authenticator begins to run. If the
e authentication request packet.
3600.
ver-period-value: Period set by the version request timeout timer, ranging from 1 to 30,
1.2.14 En uiet-Period Timer
s not do anything related to 802.1x
server-timeout: Specify the
ntication Se re the spec
st.
pecify how long the duration of a timeout timer of an
. The value ranges from 100 to 300 in units of second and
uthentication Serv
the authentication timeout timer of a Supplicant. After the
quest/Challenge request packet which requests the MD5
uthenticator sends Re
xt, the supp-timeout timer of
S
supp-timeout-value: Specify how long the duration of an authentication timeout timer of
a Supplicant is. The value ranges from 10 to 120 in units of second and defaults to 30.
tx-period: Specify the transmission timeout timer. After the Authenticator sends the
Request/Identity request packet w
Supplicant does not respond back with authentication reply packet successfully, then
the Authenticator will resend th
tx-period-value: Specify how long the duration of the transmission timeout timer is. The
value ranges from 10 to 120 in units of second and defaults to 30.
reauth-period: Re-authentication timeout timer. During the time limit set by this timer,
the supplicant device launches 802.1x re-authentication.
reauth-period-value: Period set by the re-authentication timeout timer, ranging from 1 to
86400, in seconds. By default, the value is
ver-period: Client version request timeout timer. If the supplicant device failed to send
the version response packet within the time set by this timer, then the authenticator
device will resend the version request packet.
in seconds. By default, the value is 1.
abling/Disabling a Q
You can use the following commands to enable/disable a quiet-period timer of an
Authenticator (which can be a Quidway Series Ethernet Switch). If an 802.1x user has
not passed the authentication, the Authenticator will keep quiet for a while (which is
specified by dot1x timer quiet-period command) before launching the authentication
again. During the quiet period, the Authenticator doe
authentication.
Perform the following configuration in system view.