1-10the supplicant system. During this quiet period, the switch does not perform any 802.1xauthentication-related actions for the supplicant system.z Re-authentication timer (reauth-period). The switch initiates 802.1x re-authenticationat the interval set by the re-authentication timer.z RADIUS server timer (server-timeout). This timer sets the server-timeout period.After sending an authentication request packet to the RADIUS server, the switch sendsanother authentication request packet if it does not receive the response from theRADIUS server when this timer times out.z Supplicant system timer (supp-timeout). This timer sets the supp-timeout period andis triggered by the switch after the switch sends a request/challenge packet to asupplicant system. The switch sends another request/challenge packet to thesupplicant system if the switch does not receive the response from the supplicantsystem when this timer times out.z Transmission timer (tx-period). This timer sets the tx-period and is triggered by theswitch in two cases. The first case is when the client requests for authentication. Theswitch sends a unicast request/identity packet to a supplicant system and then triggersthe transmission timer. The switch sends another request/identity packet to thesupplicant system if it does not receive the reply packet from the supplicant systemwhen this timer times out. The second case is when the switch authenticates the802.1x client who cannot request for authentication actively. The switch sendsmulticast request/identity packets periodically through the port enabled with 802.1xfunction. In this case, this timer sets the interval to send the multicast request/identitypackets.z Client version request timer (ver-period). This timer sets the version period and istriggered after a switch sends a version request packet. The switch sends anotherversion request packet if it does receive version response packets from the supplicantsystem when the timer expires.802.1x Implementation on an S5600 Series SwitchIn addition to the earlier mentioned 802.1x features, an S5600 series switch is also capableof the following:z Checking supplicant systems for proxies, multiple network adapters, and so on (Thisfunction needs the cooperation of a CAMS server.)z Checking client versionz The guest VLAN functionH3C's CAMS Server is a service management system used to manage networks and tosecure networks and user information. With the cooperation of other networking devices(such as switches) in the network, a CAMS server can implement the AAA functions andrights management.
