Alcatel-Lucent 7750 SR OS, Interface Configuration Manual, Page: 88 / 444

Port Features
Page 88 7750 SR OS Interface Configuration Guide
Figure 23: 802.1x EAPOL Timers (left) and RADIUS Timers (right)
The Alcatel-Lucent 7750 SR can also be configured to periodically trigger the authentication
procedure automatically. This is controlled by the enable re-authentication and reauth-period
parameters. Reauth-period indicates the period in seconds (since the last time that the
authorization state was confirmed) before a new authentication procedure is started. The range of
reauth-period is 1-9000 seconds (the default is 3600 seconds, one hour). Note that the port stays in
Authorized state during the re-authentication procedure.
802.1x Configuration and Limitations
Configuration of 802.1x network access control on the Alcatel-Lucent 7750 SR consists of two
parts:
• Generic parameters, which are configured under
config>security>dot1x
• Port-specific parameters, which are configured under
config>port>ethernet>dot1x
801.x authentication:
• Provides access to the port for any device, even if only a single client has been
authenticated;
• Can only be used to gain access to a pre-defined Service Access Point (SAP). It is not
possible to dynamically select a service (e.g., a VPLS) depending on the 802.1x
authentication information;
OSSG040
Client
quiet-period
supplicant-
timeout
transmit-
period
EAP-Request/ID
EAP-Request/ID
EAP-Request/ID
EAP-Request/ID
Alcatel 7450 ESS RADIUS
Authentication
Server
Client
Access Request
Access Request
Access Request
quiet-period
server-
timeout
max-auth-request
EAP-Request/ID
EAP-Response/ID
EAP-Failure
EAP-Request/ID
Alcatel 7450 ESS RADIUS
Authentication
Server
802.1x EAPOL Timers
802.1x RADIUS Timers
Port Unauthorized
7750 SR
7750 SR