Operation Manual – 802.1x-System GuardH3C S3100 Series Ethernet Switches Chapter 1 802.1x Configuration1-221) The switch uses the value of the Session-timeout attribute field of theAccess-Accept packet sent by the RADIUS server as the re-authenticationinterval.2) The switch uses the value configured with the dot1x timer reauth-periodcommand as the re-authentication interval for access users.Note the following:During re-authentication, the switch always uses the latest re-authentication intervalconfigured, no matter which of the above-mentioned two ways is used to determine there-authentication interval. For example, if you configure a re-authentication interval onthe switch and the switch receives an Access-Accept packet whose Termination-Actionattribute field is 1, the switch will ultimately use the value of the Session-timeoutattribute field as the re-authentication interval.The following introduces how to configure the 802.1x re-authentication timer on theswitch.Table 1-8 Configure the re-authentication intervalOperation Command RemarksEnter system view system-view —Configure are-authentication intervaldot1x timerreauth-periodreauth-period-valueOptionalBy default, there-authentication intervalis 3,600 seconds.1.5 Displaying and Debugging 802.1xAfter performing the above configurations, you can display and verify the802.1x-related configuration by executing the display command in any view.You can clear 802.1x-related statistics information by executing the reset command inuser view.Table 1-9 Display and debug 802.1xOperation Command RemarksDisplay the configuration,session, and statisticsinformation about 802.1xdisplay dot1x [ sessions| statistics ] [ interfaceinterface-list ]This command can beexecuted in any view.Clear 802.1x-relatedstatistics informationreset dot1x statistics[ interface interface-list ]Execute this command inuser view.
