198
•
Periodic reauthentication timer (reauth-period)
—Sets the interval at which the network
device periodically reauthenticates online 802.1X users. To enable 802.1X periodic
reauthentication on a port, use the
dot1x re-authenticate
command.
•
Server timeout timer (server-timeout)
—Starts when the access device sends a RADIUS
Access-Request packet to the authentication server. If no response is received when this timer
expires, the 802.1X authentication fails.
•
Client timeout timer (supp-timeout)
—Starts when the access device sends an
EAP-Request/MD5-Challenge packet to a client. If no response is received when this timer
expires, the access device retransmits the request to the client.
•
Username request timeout timer (tx-period)
—Starts when the device sends an
EAP-Request/Identity packet to a client in response to an authentication request. If the device
does not receive a response before this timer expires, it retransmits the request. The timer also
sets the interval at which the network device sends multicast EAP-Request/Identity packets to
detect clients that cannot actively request authentication.
The change to the periodic reauthentication timer applies to the users that have been online only
after the old timer expires. Other timer changes take effect immediately on the device.
Examples
# Set the server timeout timer to 150 seconds.
<Sysname> system-view
[Sysname] dot1x timer server-timeout 150
Related commands
display dot1x
dot1x timer reauth-period
Use
dot1x timer reauth-period
to set the 802.1X periodic reauthentication timer on a port.
Use
undo dot1x timer reauth-period
to restore the default.
Syntax
dot1x timer reauth-period reauth-period-value
undo dot1x timer reauth-period
Default
No 802.1X periodic reauthentication timer is configured on a port. The port uses the global 802.1X
periodic reauthentication timer.
Views
Layer 2 Ethernet interface view
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
reauth-period-value
: Specifies the 802.1X periodic reauthentication timer in seconds. The value
range for the
reauth-period-value
argument is 60 to 7200.
Содержание FlexNetwork 7500 Series
Страница 350: ...335 Related commands display port security port security enable ...
Страница 379: ...364 Sysname system view Sysname keychain abc mode absolute Sysname keychain abc tcp kind 252 ...
Страница 519: ...504 Related commands display ssh2 algorithm ssh2 algorithm cipher ssh2 algorithm key exchange ssh2 algorithm mac ...