H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 232)

23-15
To do… Use the command… Remarks
Set 802.1x timers
dot1x timer { handshake-period
handshake-period-value |
quiet-period quiet-period-value |
server-timeout server-timeout-value |
supp-timeout supp-timeout-value |
tx-period tx-period-value | ver-period
ver-period-value }
Optional
The settings of 802.1x timers are as
follows.
z handshake-period-value: 15
seconds
z quiet-period-value: 60 seconds
z server-timeout-value: 100 seconds
z supp-timeout-value: 30 seconds
z tx-period-value: 30 seconds
z ver-period-value: 30 seconds
Enable the quiet-period
timer
dot1x quiet-period
Optional
By default, the quiet-period timer is
disabled.
z
As for the dot1x max-user command, if you execute it in system view without specifying the
interface-list argument, the command applies to all ports. You can also use this command in port
view. In this case, this command applies to the current port only and the interface-list argument is
not needed.
z
As for the configuration of 802.1x timers, the default values are recommended.
Advanced 802.1x Configuration
Advanced 802.1x configurations, as listed below, are all optional.
z
Configuration concerning CAMS, including multiple network adapters detecting, proxy detecting,
and so on.
z
Client version checking configuration
z
DHCP–triggered authentication
z
Guest VLAN configuration
z
802.1x re-authentication configuration
z
Configuration of the 802.1x re-authentication timer
You need to configure basic 802.1x functions before configuring the above 802.1x features.
Configuring Proxy Checking
Follow these steps to configure proxy checking:
To do… Use the command… Remarks
Enter system view system-view —
Enable proxy checking function
globally dot1x supp-proxy-check { logoff
| trap }
Required
By default, the 802.1x proxy
checking function is globally
disabled.