beautypg.com

Setting the ead rule timeout time, Displaying and maintaining ead fast deployment – H3C Technologies H3C S7500E Series Switches User Manual

Page 124

background image

6-3

To do…

Use the command…

Remarks

Configure the HTTP redirect

URL

dot1x url url-string

Required

No redirect URL is configured by

default.

The redirect URL and the freely accessible network segment must belong to the same network

segment. Otherwise, the specified URL is inaccessible.

Setting the EAD rule timeout time

With the EAD fast deployment function, a user is authorized by an EAD rule (generally an ACL

rule) to access the freely accessible network segment before passing authentication. After

successful authentication, the occupied ACL will be released. If a large amount of users access

the freely accessible network segment but fail the authentication, ACLs will soon be used up

and new users will be rejected.

An EAD rule timeout timer is designed to solve this problem. When a user accesses the network,

this timer is started. If the user neither downloads client software nor performs authentication

before the timer expires, the occupied ACL will be released so that other users can use it. When

there are a large number of users, you can shorten the timeout time to improve the ACL usage

efficiency.

Follow these steps to set the EAD rule timeout time:

To do…

Use the command…

Remarks

Enter system view

system-view

Set EAD rule timeout time

dot1x timer ead-timeout

ead-timeout-value

Optional

30 minutes by default

Displaying and Maintaining EAD Fast Deployment

To do…

Use the command…

Remarks

Display 802.1X session

information, statistics, or

configuration information

display dot1x [ sessions |

statistics ] [ interface interface-list ]

Available in any view