3Com WX3000 Additional 802.1x Features Implemented, Checking the supplicant system

z

z

z

z

RADIUS server timer (server-timeout). This timer sets the server-timeout period. After sending an authentication request packet to the RADIUS server, the device sends another authentication request packet if it does not receive the response from the RADIUS server when this timer times out.

Supplicant system timer (supp-timeout). This timer sets the supp-timeout period and is triggered by the device after the device sends a request/challenge packet to a supplicant system. The device sends another request/challenge packet to the supplicant system if the device does not receive the response from the supplicant system when this timer times out.

Transmission timer (tx-period). This timer sets the tx-period and is triggered by the device in two cases. The first case is when the client requests for authentication. The device sends a unicast request/identity packet to a supplicant system and then triggers the transmission timer. The device sends another request/identity packet to the supplicant system if it does not receive the reply packet from the supplicant system when this timer times out. The second case is when the device authenticates the iNode client who cannot request for authentication actively. The device sends multicast request/identity packets periodically through the port enabled with 802.1x function. In this case, this timer sets the interval to send the multicast request/identity packets.

Client version request timer (ver-period). This timer sets the version period and is triggered after the device sends a version request packet. The device sends another version request packet if it does receive version response packets from the supplicant system when the timer expires.

Additional 802.1x Features Implemented

In addition to the earlier mentioned 802.1x features, the device is also capable of the following:

z

z

z

Checking supplicant systems for proxies, multiple network adapters, etc (This function needs the cooperation of a iMC server.)

Checking client version The Guest VLAN function

iMC Server is a service management system used to manage networks and to secure networks and user information. With the cooperation of other networking devices (such as the WX3000 series devices) in the network, a iMC server can implement the AAA functions and rights management.

Checking the supplicant system

The device checks:

z

z

z

Supplicant systems logging on through proxies Supplicant systems logging on through IE proxies

Whether or not a supplicant system logs in through more than one network adapters (that is, whether or not more than one network adapters are active in a supplicant system when the supplicant system logs in).

In response to any of the three cases, the device can optionally take the following measures:

z

z

Only disconnects the supplicant system but sends no Trap packets. Sends Trap packets without disconnecting the supplicant system.

1-9