H3C Technologies H3C S6300 Series Switches - Manual (Page 91)

76
Configuring the quiet timer
The quiet timer enables the network access device to wait a period of time before it can process any
authentication request from a client that has failed an 802.1X authentication.
You can set the quiet timer to a high value in a vulnerable network or a low value for quicker
authentication response.
To configure the quiet timer:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enable the quiet timer. dot1x quiet-period By default, the timer is disabled.
3. (Optional.) Set the quiet timer. dot1x timer quiet-period
quiet-period-value
The default is 60 seconds.
Enabling the periodic online user re-authentication
function
Periodic online user re-authentication tracks the connection status of online users, and updates the
authorization attributes assigned by the server. The re-authentication interval is user configurable.
The periodic online user re-authentication timer can also be set by the authentication server in the
session-timeout attribute. The server-assigned timer overrides the timer setting on the access device, and
enables periodic online user re-authentication, even if the function is not configured. Support for the
server assignment of re-authentication timer and the re-authentication timer configuration on the server
vary with servers.
To enable the periodic online user re-authentication function:
Step Command Remarks
1. Enter system view. system-view N/A
2. (Optional.) Set the periodic
re-authentication timer. dot1x timer reauth-period
reauth-period-value
The default is 3600 seconds.
3. Enter Layer 2 Ethernet
interface view. interface interface-type
interface-number
N/A
4. Enable periodic online user
re-authentication.
dot1x re-authenticate By default, the function is disabled.
Displaying and maintaining 802.1X
Execute the display commands in any view and reset commands in user view.