Operation Manual – 802.1x-HABP-MAC Authentication
H3C S3610&S5510 Series Ethernet Switches
Chapter 2 EAD Fast Deployment Configuration
2-3
III. Setting the EAD rule timeout time
With the EAD fast deployment function, a user is authorized by an EAD rule (generally
an ACL rule) to access the freely accessible network segment before passing
authentication. After successful authentication, the occupied ACL will be released. If a
large amount of users access the freely accessible network segment but fail the
authentication, ACLs will soon be used up and new users will be rejected.
An EAD rule timeout timer is designed to solve this problem. When a user accesses the
network, this timer is started. If the user neither downloads client software nor performs
authentication before the timer expires, the occupied ACL will be released so that other
users can use it. When there are a large number of users, you can shorten the timeout
time to improve the ACL usage efficiency.
Follow these steps to set the EAD rule timeout time:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Set EAD rule timeout
time
dot1x timer ead-timeout
ead-timeout-value
Optional
30 minutes by default
2.3 Displaying and Maintaining EAD Fast Deployment
To do…
Use the command…
Remarks
Display 802.1x session
information, statistics, or
configuration information
display dot1x
[
sessions
|
statistics
] [
interface
interface-list
]
Available in any view
2.4 EAD Fast Deployment Configuration Example
I. Network requirements
As shown in
, the host is connected to the device, and the device is
connected to the freely accessible network segment and outside network.
It is required that:
z
Before successful 802.1 authentication, the host using IE to access outside
network will be redirected to the WEB server, and it can download and install
802.1x client software.
z
After successful 802.1x authentication, the host can access outside network.
