Operation Manual – 802.1x and System GuardH3C S5600 Series Ethernet Switches Chapter 1 802.1x Configuration1-11response packets after the maximum number of handshake request transmissionattempts is reached.z Quiet-period timer (quiet-period). This timer sets the quiet-period. When asupplicant system fails to pass the authentication, the switch quiets for the setperiod (set by the quiet-period timer) before it processes another authenticationrequest re-initiated by the supplicant system. During this quiet period, the switchdoes not perform any 802.1x authentication-related actions for the supplicantsystem.z Re-authentication timer (reauth-period). The switch initiates 802.1xre-authentication at the interval set by the re-authentication timer.z RADIUS server timer (server-timeout). This timer sets the server-timeout period.After sending an authentication request packet to the RADIUS server, the switchsends another authentication request packet if it does not receive the responsefrom the RADIUS server when this timer times out.z Supplicant system timer (supp-timeout). This timer sets the supp-timeout periodand is triggered by the switch after the switch sends a request/challenge packet toa supplicant system. The switch sends another request/challenge packet to thesupplicant system if the switch does not receive the response from the supplicantsystem when this timer times out.z Transmission timer (tx-period). This timer sets the tx-period and is triggered bythe switch in two cases. The first case is when the client requests forauthentication. The switch sends a unicast request/identity packet to a supplicantsystem and then triggers the transmission timer. The switch sends anotherrequest/identity packet to the supplicant system if it does not receive the replypacket from the supplicant system when this timer times out. The second case iswhen the switch authenticates the 802.1x client who cannot request forauthentication actively. The switch sends multicast request/identity packetsperiodically through the port enabled with 802.1x function. In this case, this timersets the interval to send the multicast request/identity packets.z Client version request timer (ver-period). This timer sets the version period and istriggered after a switch sends a version request packet. The switch sends anotherversion request packet if it does receive version response packets from thesupplicant system when the timer expires.1.1.6 802.1x Implementation on an S5600 Series SwitchIn addition to the earlier mentioned 802.1x features, an S5600 series switch is alsocapable of the following:z Checking supplicant systems for proxies, multiple network adapters, and so on(This function needs the cooperation of a CAMS server.)z Checking client versionz The guest VLAN function
