3Com S7902E, Руководство по настройке

Страница: 1905 / 2621

2-3
To do… Use the command… Remarks
Configure the IE redirect URL dot1x url url-string
Required
No redirect URL is configured
by default.
The redirect URL and the freely accessible network segment must belong to the same network segment.
Otherwise, the specified URL is inaccessible.
Setting the EAD rule timeout time
With the EAD fast deployment function, a user is authorized by an EAD rule (generally an ACL rule) to
access the freely accessible network segment before passing authentication. After successful
authentication, the occupied ACL will be released. If a large amount of users access the freely
accessible network segment but fail the authentication, ACLs will soon be used up and new users will
be rejected.
An EAD rule timeout timer is designed to solve this problem. When a user accesses the network, this
timer is started. If the user neither downloads client software nor performs authentication before the
timer expires, the occupied ACL will be released so that other users can use it. When there are a large
number of users, you can shorten the timeout time to improve the ACL usage efficiency.
Follow these steps to set the EAD rule timeout time:
To do… Use the command… Remarks
Enter system view system-view —
Set EAD rule timeout time
dot1x timer ead-timeout
ead-timeout-value
Optional
30 minutes by default
Displaying and Maintaining EAD Fast Deployment
To do… Use the command… Remarks
Display 802.1X session
information, statistics, or
configuration information display dot1x [ sessions |
statistics ] [ interface
interface-list ]
Available in any view
EAD Fast Deployment Configuration Example
Network requirements
As shown in Figure 2-1 , the host is connected to the device, and the device is connected to the freely
accessible network segment and outside network.