1-10z Username request timeout timer (tx-period): This timer is triggered by the device in two cases. Thefirst case is when the client requests for authentication. The device starts this timer when it sendsan EAP-Request/Identity packet to a client. If it receives no response before this timer expires, thedevice retransmits the request. The second case is when the device authenticates the 802.1Xclient that cannot request for authentication actively. The device sends multicastEAP-Request/Identity packets periodically through the port enabled with 802.1X function. In thiscase, this timer sets the interval between sending the multicast EAP-Request/Identity packets.z Client timeout timer (supp-timeout): Once a device sends an EAP-Request/MD5 Challenge packetto a client, it starts this timer. If this timer expires but it receives no response from the client, itretransmits the request.z Server timeout timer (server-timeout): Once a device sends a RADIUS Access-Request packet tothe authentication server, it starts this timer. If this timer expires but it receives no response fromthe server, it retransmits the request.z Handshake timer (handshake-period): After a client passes authentication, the device sends to theclient handshake requests at this interval to check whether the client is online. If the devicereceives no response after sending the allowed maximum number of handshake requests, itconsiders that the client is offline.z Quiet timer (quiet-period): When a client fails the authentication, the device refuses furtherauthentication requests from the client in this period of time.z Periodic re-authentication timer (reauth-period): If periodic re-authentication is enabled on a port,the device re-authenticates online users on the port at the interval specified by this timer.Features Working Together with 802.1XThese features are:z VLAN assignmentz Guest VLANz Auth-Fail VLANz ACL assignmentz Mandatory authentication domain for a specified portVLAN assignmentAfter an 802.1X user passes the authentication, the server will send an authorization message to thedevice. If the server is configured with the VLAN assignment function, the assigned VLAN informationwill be included in the message. The device, depending on the link type of the port used to log in, addsthe port to the assigned VLAN according to the following rules:z If the port link type is Access, the port leaves its initial VLAN, that is, the VLAN configured for it andjoins the assigned VLAN.z If the port link type is Trunk, the assigned VLAN is allowed to pass the current trunk port. Thedefault VLAN ID of the port is that of the assigned VLAN.z If the port link type is Hybrid, the assigned VLAN is allowed to pass the current port without carryingthe tag. The default VLAN ID of the port is that of the assigned VLAN. Note that if the Hybrid port isconfigured with MAC-based VLAN, the device will dynamically create a MAC-based VLANaccording to the VLAN assigned by the authentication server, and remain the default VLAN ID ofthe port unchanged.
