Operation Manual – 802.1x-HABP-MAC AuthenticationH3C S5500-EI Series Ethernet Switches Chapter 1 802.1x Configuration1-15To do… Use the command… RemarksSet the maximum numberof attempts to send anauthentication request toa supplicantdot1x retrymax-retry-valueOptional2 by defaultSet timersdot1x timer{ handshake-periodhandshake-period-value |quiet-periodquiet-period-value |server-timeoutserver-timeout-value |supp-timeoutsupp-timeout-value |tx-periodtx-period-value }OptionalThe defaults are asfollows:15 seconds for thehandshake timer,60 seconds for the quiettimer,100 seconds for theserver timeout timer,30 seconds for thesupplicant timeout timer,and30 seconds for theusername request timeouttimer.Enable the quiet timer dot1x quiet-period OptionalDisabled by defaultNote that:z For 802.1x to take effect on a port, you must enable it both globally in system viewand for the port in system view or Ethernet interface view.z You can also enable 802.1x and set port access control parameters (that is, theport access control mode, port access method, and the maximum number of users)for a port in Ethernet interface view. For detailed configuration, refer to Configuring802.1x for a Port. The only difference between configuring 802.1x globally andconfiguring 802.1x for a port lies in the applicable scope. If both a global settingand a local setting exist for an argument of a port, the last configured one is ineffect.z Generally, it is unnecessary to change 802.1x timers unless in some special orextreme network environments.1.2.3 Configuring 802.1x for a PortI. Enabling 802.1x for a portFollow these steps to enable 802.1x for a port:
