199
Usage guidelines
The device reauthenticates online 802.1X users on a port at the specified periodic reauthentication
interval when the port is enabled with periodic reauthentication. To enable periodic reauthentication
on a port, use the
dot1x re-authenticate
command.
A change to the periodic reauthentication timer applies to online users only after the old timer
expires.
The device selects a periodic reauthentication timer for 802.1X reauthentication in the following
order:
1.
Server-assigned reauthentication timer.
2.
Port-specific reauthentication timer.
3.
Global reauthentication timer.
4.
Default reauthentication timer.
Examples
# Set the 802.1X periodic reauthentication timer to 60 seconds on Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dot1x timer reauth-period 60
Related commands
dot1x timer
dot1x unicast-trigger
Use
dot1x unicast-trigger
to enable the 802.1X unicast trigger feature.
Use
undo dot1x unicast-trigger
to disable the 802.1X unicast trigger feature.
Syntax
dot1x unicast-trigger
undo dot1x unicast-trigger
Default
The 802.1X unicast trigger feature is disabled.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The unicast trigger feature enables the access device to initiate 802.1X authentication when the
device receives a data frame from an unknown source MAC address. The device sends a unicast
EAP-Request/Identity packet to the unknown source MAC address. It will retransmit the packet if it
does not receive any responses within a period of time (set by using the
dot1x timer tx-period
command). This process continues until the maximum number of request attempts (set by using the
dot1x retry
command) is reached.
Examples
# Enable the unicast trigger feature on Ten-GigabitEthernet 1/0/1.
