186• Quiet timer (quiet-period)—Starts when a client fails authentication. The access device mustwait the time period before it can process the authentication attempts from the client.• Periodic reauthentication timer (reauth-period)—Sets the interval at which the networkdevice periodically reauthenticates online 802.1X users. To enable periodic online userreauthentication on a port, use the dot1x re-authenticate command.• Server timeout timer (server-timeout)—Starts when the access device sends a RADIUSAccess-Request packet to the authentication server. If no response is received when this timerexpires, the access device retransmits the request to the server.• Client timeout timer (supp-timeout)—Starts when the access device sends anEAP-Request/MD5-Challenge packet to a client. If no response is received when this timerexpires, the access device retransmits the request to the client.• Username request timeout timer (tx-period)—Starts when the device sends anEAP-Request/Identity packet to a client in response to an authentication request. If the devicedoes not receive a response before this timer expires, it retransmits the request. The timer alsosets the interval at which the network device sends multicast EAP-Request/Identity packets todetect clients that cannot actively request authentication.The change to the periodic reauthentication timer applies to the users that have been online onlyafter the old timer expires. Other timer changes take effect immediately on the device.Examples# Set the server timeout timer to 150 seconds. system-view[Sysname] dot1x timer server-timeout 150Related commandsdisplay dot1xdot1x unicast-triggerUse dot1x unicast-trigger to enable the 802.1X unicast trigger feature.Use undo dot1x unicast-trigger to disable the 802.1X unicast trigger feature.Syntaxdot1x unicast-triggerundo dot1x unicast-triggerDefaultThe 802.1X unicast trigger feature is disabled.ViewsEthernet interface viewPredefined user rolesnetwork-adminUsage guidelinesThe unicast trigger feature enables the access device to initiate 802.1X authentication when thedevice receives a data frame from an unknown source MAC address. The device sends a unicastEAP-Request/Identity packet to the unknown source MAC address. It will retransmit the packet if itdoes not receive any responses within a period of time (set by using the dot1x timer tx-periodcommand). This process continues until the maximum number of request attempts (set by using thedot1x retry command) is reached.
