1-20To do... Use the command... Remarksdot1x version-checkquitSet the maximumnumber of retires to sendversion checking requestpacketsdot1x retry-version-maxmax-retry-version-valueOptionalBy default, the maximum numberof retires to send version checkingrequest packets is 3.Set the client versionchecking period timerdot1x timer ver-periodver-period-valueOptionalBy default, the timer is set to 30seconds.As for the dot1x version-user command, if you execute it in system view withoutspecifying the interface-list argument, the command applies to all ports. You can alsoexecute this command in port view. In this case, this command applies to the current portonly and the interface-list argument is not needed.Configuring the Unicast Trigger FunctionThe device can trigger authentication for clients that cannot send EAPOL-Start packetsand therefore cannot trigger authentication, for example, the 802.1X client provided byWindows XP. Based on the differences in packet transmission mode, unsolicited triggeringof the device falls into two categories:z Multicast triggering mode: The device multicasts EAP-Request/Identify packetsperiodically to clients.z Unicast triggering mode: The device deems that a new user is attached to itself uponreceiving a data frame on a port with the source MAC address not included in the MACaddress table. In this case, the device sends a unicast packet out the port to trigger802.1X authentication.With the 802.1X unicast trigger function enabled, the device sends unicast packets out aport on which it received a data frame whose source MAC address is not listed in the MACaddress table.Follow these steps to configure the unicast trigger function:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet interface view interface interface-typeinterface-number —Enable the unicast triggerfunction dot1x unicast-trigger OptionalDisabled by default
