126
Or
<Sysname> system-view
[Sysname] dot1x supp-proxy-check trap
[Sysname] interface gigabitethernet 3/0/9
[Sysname-GigabitEthernet3/0/9] dot1x supp-proxy-check trap
Related commands
display dot1x
dot1x timer
Use
dot1x
timer
to set 802.1X timers.
Use
undo dot1x
timer
to restore the defaults.
Syntax
dot1x timer
{
handshake-period
handshake-period-value
|
quiet-period
quiet-period-value
|
reauth-period
reauth-period-value
|
server-timeout
server-timeout-value
|
supp-timeout
supp-timeout-value
|
tx-period
tx-period-value
}
undo dot1x timer
{
handshake-period
|
quiet-period
|
reauth-period
|
server-timeout
|
supp-timeout
|
tx-period
}
Default
The handshake timer is 15 seconds, the quiet timer is 60 seconds, the periodic re-authentication
timer is 3600 seconds, the server timeout timer is 100 seconds, the client timeout timer is 30 seconds,
and the username request timeout timer is 30 seconds.
Views
System view
Default command level
2: System level
Parameters
handshake-period-value
: Sets the handshake timer in seconds. It is in the range of 5 to 1024.
quiet-period-value
: Sets the quiet timer in seconds. It is in the range of 10 to 120.
reauth-period-value
: Sets the periodic re-authentication timer in seconds. It is in the range of 60 to
7200.
server-timeout-value
: Sets the server timeout timer in seconds. It is in the range of 100 to 300.
supp-timeout-value
: Sets the client timeout timer in seconds. It is in the range of 1 to 120.
tx-period-value
: Sets the username request timeout timer in seconds. It is in the range of 10 to 120.
Usage guidelines
You can set the client timeout timer to a high value in a low-performance network, set the quiet timer
to a high value in a vulnerable network or a low value for quicker authentication response, or adjust
the server timeout timer to adapt to the performance of different authentication servers. In most
cases, the default settings are sufficient.
The network device uses the following 802.1X timers:
•
Handshake timer (handshake-period)
—Sets the interval at which the access device sends
client handshake requests to check the online status of a client that has passed authentication.
If the device receives no response after sending the maximum number of handshake requests,
it considers that the client has logged off.
