1-23During re-authentication, the switch always uses the latest re-authentication intervalconfigured, no matter which of the above-mentioned two ways is used to determine there-authentication interval. For example, if you configure a re-authentication interval on theswitch and the switch receives an Access-Accept packet whose Termination-Actionattribute field is 1, the switch will ultimately use the value of the Session-timeout attributefield as the re-authentication interval.The following introduces how to configure the 802.1x re-authentication timer on the switch.Follow these steps to configure the re-authentication interval:To do... Use the command... RemarksEnter system view system-view —Configure a re-authenticationintervaldot1x timer reauth-periodreauth-period-valueOptionalBy default, there-authentication interval is3,600 seconds.Displaying and Maintaining 802.1x ConfigurationTo do... Use the command... RemarksDisplay the configuration,session, and statisticsinformation about 802.1xdisplay dot1x [ sessions |statistics ] [ interfaceinterface-list ]Available in any viewClear 802.1x-related statisticsinformationreset dot1x statistics[ interface interface-list ] Available in user viewConfiguration Example802.1x Configuration ExampleNetwork requirementsz Authenticate users on all ports to control their accesses to the Internet. The switchoperates in MAC-based access control mode.z All supplicant systems that pass the authentication belong to the default domainnamed “aabbcc.net”. The domain can accommodate up to 30 users. As forauthentication, a supplicant system is authenticated locally if the RADIUS server fails.And as for accounting, a supplicant system is disconnected by force if the RADIUSserver fails. The name of an authenticated supplicant system is not suffixed with thedomain name. A connection is terminated if the total size of the data passes through itduring a period of 20 minutes is less than 2,000 bytes.z The switch is connected to a server comprising of two RADIUS servers whose IPaddresses are 10.11.1.1 and 10.11.1.2. The RADIUS server with an IP address of10.11.1.1 operates as the primary authentication server and the secondary accountingserver. The other operates as the secondary authentication server and primaryaccounting server. The password for the switch and the authentication RADIUSservers to exchange message is “name”. And the password for the switch and the
