1-14z 802.1x configurations take effect only after you enable 802.1x both globally and for specified ports.z If you enable 802.1x for a port, you cannot set the maximum number of MAC addresses that can belearnt for the port. Meanwhile, if you set the maximum number of MAC addresses that can be learntfor a port, it is prohibited to enable 802.1x for the port.z If you enable 802.1x for a port, it is not available to add the port to an aggregation group.Meanwhile, if a port has been added to an aggregation group, it is prohibited to enable 802.1x forthe port.z Changing the access control method on a port by the dot1x port-method command will forciblylog out the online 802.1x users on the port.z When a device operates as an authentication server, its authentication method for 802.1x userscannot be configured as EAP.z Handshaking packets need the support of the 3Com-proprietary client. They are used to testwhether or not a user is online.z As clients that are not of 3Com do not support the online user handshaking function, switchescannot receive handshaking acknowledgement packets from them in handshaking periods. Toprevent users being falsely considered offline, you need to disable the online user handshakingfunction in this case.z For the handshaking packet secure function to take effect, the clients that enable the function needto cooperate with the authentication server. If either the clients or the authentication server doesnot support the function, disabling the handshaking packet secure function is needed.Timer and Maximum User Number ConfigurationTable 1-2 Configure 802.1x timers and the maximum number of usersOperation Command RemarksEnter system view system-view —Insystemviewdot1x max-user user-number[ interface interface-list ]interface interface-typeinterface-numberdot1x max-user user-numberSet themaximumnumber ofconcurrenton-lineusers forspecifiedportsIn portviewquitOptionalBy default, a port can accommodate upto 256 users at a time.Set the maximum retrytimes to send requestpacketsdot1x retry max-retry-valueOptionalBy default, the maximum retry times tosend a request packet is 2. That is, theauthenticator system sends a requestpacket to a supplicant system for up totwo times by default.
