Operation Manual – 802.1x and System GuardH3C S5600 Series Ethernet Switches Chapter 1 802.1x Configuration1-241) The switch uses the value of the Session-timeout attribute field of theAccess-Accept packet sent by the RADIUS server as the re-authenticationinterval.2) The switch uses the value configured with the dot1x timer reauth-periodcommand as the re-authentication interval for access users.Note the following:During re-authentication, the switch always uses the latest re-authentication intervalconfigured, no matter which of the above-mentioned two ways is used to determine there-authentication interval. For example, if you configure a re-authentication interval onthe switch and the switch receives an Access-Accept packet whose Termination-Actionattribute field is 1, the switch will ultimately use the value of the Session-timeoutattribute field as the re-authentication interval.The following introduces how to configure the 802.1x re-authentication timer on theswitch.Follow these steps to configure the re-authentication interval:To do... Use the command... RemarksEnter system view system-view —Configure are-authentication intervaldot1x timerreauth-periodreauth-period-valueOptionalBy default, there-authentication intervalis 3,600 seconds.1.5 Displaying and Maintaining 802.1x ConfigurationTo do... Use the command... RemarksDisplay the configuration,session, and statisticsinformation about 802.1xdisplay dot1x [ sessions| statistics ] [ interfaceinterface-list ]Available in any viewClear 802.1x-relatedstatistics informationreset dot1x statistics[ interface interface-list ] Available in user view1.6 Configuration Example1.6.1 802.1x Configuration ExampleI. Network requirementsz Authenticate users on all ports to control their accesses to the Internet. The switchoperates in MAC-based access control mode.
