Additional 802.1x features implemented, Checking the supplicant system, Additional 802.1x features implemented -9 – H3C Technologies H3C WX3000 Series Unified Switches User Manual

Page 226

Advertising
background image

23-9

z

Re-authentication timer (reauth-period). The device will initiate 802.1x re-authentication at the
interval set by the re-authentication timer.

z

RADIUS server timer (server-timeout). This timer sets the server-timeout period. After sending an
authentication request packet to the RADIUS server, the device sends another authentication
request packet if it does not receive the response from the RADIUS server when this timer times
out.

z

Supplicant system timer (supp-timeout). This timer sets the supp-timeout period and is triggered
by the device after the device sends a request/challenge packet to a supplicant system. The device
sends another request/challenge packet to the supplicant system if the device does not receive the
response from the supplicant system when this timer times out.

z

Transmission timer (tx-period). This timer sets the tx-period and is triggered by the device in two
cases. The first case is when the client requests for authentication. The device sends a unicast
request/identity packet to a supplicant system and then triggers the transmission timer. The device
sends another request/identity packet to the supplicant system if it does not receive the reply
packet from the supplicant system when this timer times out. The second case is when the device
authenticates the 802.1x client who cannot request for authentication actively. The device sends
multicast request/identity packets periodically through the port enabled with 802.1x function. In this
case, this timer sets the interval to send the multicast request/identity packets.

z

Client version request timer (ver-period). This timer sets the version period and is triggered after
the device sends a version request packet. The device sends another version request packet if it
does receive version response packets from the supplicant system when the timer expires.

Additional 802.1x Features Implemented

In addition to the earlier mentioned 802.1x features, the device is also capable of the following:

z

Checking supplicant systems for proxies, multiple network adapters, etc (This function needs the
cooperation of a CAMS server.)

z

Checking client version

z

The Guest VLAN function

CAMS Server is a service management system used to manage networks and to secure networks and
user information. With the cooperation of other networking devices (such as the WX3000 series devices)
in the network, a CAMS server can implement the AAA functions and rights management.

Checking the supplicant system

The device checks:

z

Supplicant systems logging on through proxies

z

Supplicant systems logging on through IE proxies

Advertising