90
Setting the maximum number of concurrent
802.1X users on a port
Perform this task to prevent the system resources from being overused.
To set the maximum number of concurrent 802.1X users on a port:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter Ethernet interface
view.
interface
interface-type
interface-number
N/A
3.
Set the maximum number of
concurrent 802.1X users on
a port.
dot1x
max-user max-number
The default setting is
4294967295.
Setting the maximum number of authentication
request attempts
The access device retransmits an authentication request if it does not receive any responses to the
request from the client within a period of time. To set the time, use the
dot1x timer tx-period
tx-period-value
command or the
dot1x timer supp-timeout
supp-timeout-value
command. The
access device stops retransmitting the request if it has made the maximum number of request
transmission attempts but still receives no response.
To set the maximum number of authentication request attempts:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set the maximum number of attempts
for sending an authentication request.
dot1x retry
retries
The default setting is
2.
Setting the 802.1X authentication timeout timers
The network device uses the following 802.1X authentication timeout timers:
•
Client timeout timer
—Starts when the access device sends an EAP-Request/MD5-Challenge
packet to a client. If no response is received when this timer expires, the access device
retransmits the request to the client.
•
Server timeout timer
—Starts when the access device sends a RADIUS Access-Request
packet to the authentication server. If no response is received when this timer expires, the
access device retransmits the request to the server.
In most cases, the default settings are sufficient. You can edit the timers, depending on the network
conditions.
•
In a low-speed network, increase the client timeout timer.
•
In a network with authentication servers of different performance, adjust the server timeout
timer.
To set the 802.1X authentication timeout timers:
Содержание FlexFabric 5940 SERIES
Страница 251: ...238 ...
