Introduction to 802.1x
157
■
Handshake timer (handshake-period): This timer sets the handshake-period and is
triggered after a supplicant system passes the authentication. It sets the interval to
for a switch to send handshake request packets to online users. If you set the
number of retries to N by using the dot1x retry command, an online user is
considered offline when the switch does not receive response packets from it in a
period N times of the handshake-period.
■
Quiet-period timer: This timer sets the quiet-period. When a supplicant system fails
to pass the authentication, the switch quiets for the set period before it processes
another authentication request re-initiated by the supplicant system.
802.1x Implementation
on an S4200G Series
Switch
In addition to the earlier mentioned 802.1x features, an S4200G series switch is also
capable of the following:
■
Cooperating with a CAMS server to check supplicant systems for dual-network
adapters, and so on.
■
Checking client version
■
Implementing the Guest VLAN function
CAMS server is a service management system developed by 3Com. It can cooperate
with network devices to carry out functions such as AAA and permission
management. It enables a network to operate in the desired way and enables you to
manage a network in a easy way. It also ensures network security.
Checking the supplicant system
An S4200G series switch checks:
■
Whether or not a supplicant system logs in through more than one network cards
(that is, whether or not more than one network adapters are active in a supplicant
system when the supplicant system logs in).
Chekcing the client version
With the 802.1x client-version-checking function enabled, a switch will check the
version and validity of an 802.1x client to prevent unauthorized users or users with
earlier versions of 802.1x from logging in.
This function makes the switch to send version-requesting packets again if the 802.1x
client fails to send version-reply packet to the switch before the version-checking
timer times out.
The client-version-checking function needs the support of 3Com’s 802.1x client
program.
The Guest VLAN function
The Guest VLAN function enables supplicant systems that do not pass the
authentication to access a LAN in a restrained way.
With the Guest VLAN function enabled, supplicant systems that do not have 802.1x
client installed can access specific network resources. They can also upgrade their
802.1x clients without being authenticated.
With this function enabled:
■
The switch broadcasts active authentication packets to all 802.1x-enabled ports.
Summary of Contents for 4200G 12-Port
Page 10: ...8 CONTENTS...
Page 14: ...4 ABOUT THIS GUIDE...
Page 46: ...32 CHAPTER 5 LOGGING IN THROUGH WEB BASED NETWORK MANAGEMENT SYSTEM...
Page 48: ...34 CHAPTER 6 LOGGING IN THROUGH NMS...
Page 60: ...46 CHAPTER 9 VLAN CONFIGURATION...
Page 64: ...50 CHAPTER 10 MANAGEMENT VLAN CONFIGURATION...
Page 80: ...66 CHAPTER 13 GVRP CONFIGURATION...
Page 98: ...84 CHAPTER 15 LINK AGGREGATION CONFIGURATION...
Page 112: ...98 CHAPTER 18 MAC ADDRESS TABLE MANAGEMENT...
Page 126: ...112 CHAPTER 19 LOGGING IN THROUGH TELNET...
Page 162: ...148 CHAPTER 20 MSTP CONFIGURATION...
Page 274: ...260 CHAPTER 29 IGMP SNOOPING CONFIGURATION...
Page 276: ...262 CHAPTER 30 ROUTING PORT JOIN TO MULTICAST GROUP CONFIGURATION...
Page 298: ...284 CHAPTER 33 SNMP CONFIGURATION...
Page 304: ...290 CHAPTER 34 RMON CONFIGURATION...
Page 338: ...324 CHAPTER 36 SSH TERMINAL SERVICES...
Page 356: ...342 CHAPTER 38 FTP AND TFTP CONFIGURATION...
Page 365: ...Information Center Configuration Example 351 S4200G terminal logging...
Page 366: ...352 CHAPTER 39 INFORMATION CENTER...
Page 378: ...364 CHAPTER 40 BOOTROM AND HOST SOFTWARE LOADING...
Page 384: ...370 CHAPTER 41 Basic System Configuration and Debugging...
Page 388: ...374 CHAPTER 43 NETWORK CONNECTIVITY TEST...
Page 406: ...392 CHAPTER 45 CONFIGURATION OF NEWLY ADDED CLUSTER FUNCTIONS...
