3Com Switch 7757, Configuration Manual

Page: 236 / 940

236 C
HAPTER
29: C
ENTRALIZED
MAC A
DDRESS
A
UTHENTICATION
C
ONFIGURATION
Configuring the Timers
Used in Centralized MAC
Address Authentication
The following timers are used in centralized MAC address authentication:
■
Offline detect timer, which sets the time interval for a switch to test whether a
user goes offline. Upon detecting a user is offline, a switch notifies the RADIUS
server of the user to trigger the RADIUS server to stop the accounting on the
user.
■
Quiet timer, which sets the quiet period for a switch. After a user fails to pass
the authentication performed by a switch, the switch quiets for a specific
period (the quiet period) before it authenticates users again.
■
Server timeout timer. During authentication, the switch prohibits the user from
accessing the network through the corresponding port if the connection
between the switch and RADIUS server times out. In this case, the user can
have it authenticated through another port of the switch.
■
Reauth-period timer. After a user pass the MAC address authentication, the
switch will periodically request the server for re-authentication. The period is
determined by the Reauth-period server.
Table 167 lists the operations to configure the timers used in centralized MAC
address authentication.
Configuring Centralized
MAC Address
Re-Authentication
Re-authentication function enables a switch to re-authenticate a user’s identity or
change his authentication information when necessary if the user adopts the MAC
address authentication to access the network.
Configure the ISP domain for
MAC address authentication
users mac-authentication
domain isp-name
Required
By default, the “default
domain” is used as the ISP
domain.
Table 166 Configure the ISP domain for centralized MAC address authentication users
Operation Command Description
Table 167 Configure the timers used in centralized MAC address authentication
Operation Command Description
Enter system view system-view -
Configure a timer used in
centralized MAC address
authentication mac-authentication
timer
{ offline-detect
offline-detect-value | quiet
quiet-value | server-timeout
server-timeout-value |
reauth-period
reauth-period-value }
Optional
The default settings of the
timers used in centralized
MAC address authentication
are as follows:
■
Offline detect timer: 300
seconds
■
Quiet timer: 60 seconds
■
Server timeout timer: 100
seconds
■
Reauth-period timer: 1800
seconds