Filter
Top Products
400 CHAPTER 21: 802.1X CONFIGURATION
the supplicant system. Such a process goes on and on until the maximum number of
retries is reached. If the maximum number of retries is reached and the supplicant
system still does not respond, the switch ceases checking the client version of the
supplicant system and continues the followed authentication procedures.
Configuring the Version
Checking Timer
It is recommended that you adopt the default version checking timer setting.
802.1x Client Version
Checking Configuration
Example
Network requirements
■ The 802.1x client version checking function is enabled on all ports.
■ Configure the maximum number of retires to send version checking request
packets to be 6.
■ Set the version checking timer to 5 seconds.
Configuration procedures
1 Enter system view.
<S5500> system-view
2 Enable the 802.1x client version checking function on all ports.
[S5500] dot1x version-check
3 Configure the maximum number of retires to send version checking request packets
to be 6.
[S5500] dot1x retry-version-max 6
4 Set the version checking timer to 5 seconds.
[S5500] dot1x timer ver-period 5
Guest VLAN
Configuration
The Guest VLAN function enables supplicant systems that are not authenticated to
access specific resources and thus perform the corresponding operations, such as
obtaining 802.1x client, upgrading client, or obtaining other upgrading programs.
With the Guest VLAN function enabled, supplicant systems that do not have 802.1x
client installed can access specific network resources. And those that have 802.1x
client installed can upgrade their 802.1x clients without being authenticated.
Table 424 Configure the maximum number of retires to send version checking request
packets
Operation Command Description
Enter system view system-view —
Configure the
maximum number of
retires to send version
checking request
packets
dot1x retry-version-max
max-retry-version-value
Optional
By default, the maximum number of
retires to send version checking
request packets is 3.
Table 425 Configure the version checking timer
Operation Command Description
Enter system view system-view —
Configure the version
checking timer
dot1x timer ver-period
ver-period-value
Optional
By default, the version checking
timer is set to 30 seconds.