3Com 4500 PWR 26-PORT Switch User Manual


 
802.1x Configuration Commands 245
Example
To configure the Switch to cut the network connection to a user upon detecting
the use of proxy on Ethernet 1/0/1 ~ Ethernet 1/0/8, enter the following:
<4500>system-view
System View: return to User View with Ctrl+Z.
[4500]dot1x supp-proxy-check logoff
[4500]dot1x supp-proxy-check logoff interface Ethernet 1/0/1 to
Ethernet 1/0/8
To configure the Switch to send a trap message upon detecting the use of proxy to
login to Ethernet 1/0/9, enter the following:
[4500]dot1x supp-proxy-check trap
[4500]dot1x supp-proxy-check trap interface ethernet 1/0/9
or
[4500]dot1x supp-proxy-check trap
[4500]interface Ethernet 1/0/9
[4500-ethernet1/0/9]dot1x supp-proxy-check trap
dot1x timer Syntax
dot1x timer { handshake-period handshake-period-value | quiet-period
quiet-period-value | tx-period tx-period-value | supp-timeout
supp-timeout-value | server-timeout server-timeout-value }
undo dot1x timer { handshake-period | quiet-period | tx-period |
supp-timeout | server-timeout }
View
System View
Parameter
handshake-period: This timer begins after the user has passed authentication.
After setting the handshake-period, the system will send a handshake packet
every handshake period seconds. Suppose the dot1x handshake-period time is
configured as N, the system will consider the user as having logged off and will set
the user state as logoff if the system does not receive a response from the user for
N consecutive times.
handshake-period-value: Handshake period. The value ranges from 1 to 1024 in
units of second and defaults to 15.
quiet-period: Specify the quiet timer. If an 802.1x user has not passed the
authentication, the Authenticator will keep quiet for a while (which is specified by
quiet-period timer) before launching the authentication again. During the quiet
period, the Authenticator does not do anything related to 802.1x authentication.
quiet-period-value: Specify how long the quiet period is. The value ranges
from 10 to 120 in units of second and defaults to 60.
server-timeout: Specify the timeout timer of an Authentication Server. If an
Authentication Server has not responded before the specified period expires, the
Authenticator will resend the authentication request.