H3C SOHO IE4300, Command Reference Manual

Page: 1984 / 3296

38
undo dot1x timer { ead-timeout | handshake-period | quiet-period |
reauth-period | server-timeout | supp-timeout | tx-period | user-aging
{ auth-fail-vlan | critical-vlan | guest-vlan } }
Default
The following 802.1X timers apply:
•
EAD rule timer: 30 minutes.
•
Handshake timer: 15 seconds.
•
Quiet timer: 60 seconds.
•
Periodic reauthentication timer: 3600 seconds.
•
Server timeout timer: 100 seconds.
•
Client timeout timer: 30 seconds.
•
Username request timeout timer: 30 seconds.
•
User aging timers for all applicable types of 802.1X VLANs: 1000 seconds.
Views
System view
Predefined user roles
network-admin
Parameters
ead-timeout ead-timeout-value
: Sets the EAD rule timer in minutes. The value range for
the
ead-timeout-value
argument is 1 to 1440.
handshake-period handshake-period-value : Sets the handshake timer in seconds. The
value range for the
handshake-period-value
argument is 5 to 1024.
quiet-period quiet-period-value
: Sets the quiet timer in seconds. The value range for the
quiet-period-value
argument is 10 to 120.
reauth-period reauth-period-value
: Sets the periodic reauthentication timer in seconds.
The value range for this argument is 60 to 86400.
server-timeout server-timeout-value
: Sets the server timeout timer in seconds. The
value range for the
server-timeout-value
argument is 100 to 300.
supp-timeout supp-timeout-value : Sets the client timeout timer in seconds. The value
range for the supp-timeout-value argument is 1 to 120.
tx-period tx-period-value
: Sets the username request timeout timer in seconds. The value
range for the
tx-period-value
argument is 1 to 120.
user-aging
: Sets the user aging timer for a type of 802.1X VLAN.
auth-fail-vlan : Specifies 802.1X Auth-Fail VLANs.
critical-vlan
: Specifies 802.1X critical VLANs.
guest-vlan
: Specifies 802.1X guest VLANs.
aging-time-value
: Sets the user aging timer. The value range is 60 to 2147483647 seconds.
Usage guidelines
In most cases, the default settings are sufficient. You can edit the timers, depending on the network
conditions.
•
In a low-speed network, increase the client timeout timer.
•
In a vulnerable network, set the quiet timer to a high value.