3Com 3CRWX120695A WXR100, 3CRWXR10095A, WX4400 3CRWX440095A WX1200 manual Attempts

304CHAPTER 8: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS

2To enable 802.1X authentication for all wired authentication ports on the WX switch, select System Authentication Control.

To disable 802.1X authentication for all wired authentication ports, clear System Authentication Control. By default, 802.1X authentication is enabled.

3To specify the number of seconds the WX switch waits before attempting reauthentication, specify the timeout value (0 to 65,535 seconds) in the Quiet Period Timeout box. The default is 60 seconds.

4To specify the number of seconds the WX switch waits before retransmitting an Extensible Authentication Protocol over LAN (EAPoL) packet, specify the timeout value (1 to 65,535 seconds) in the Retransmit Timeout box. The default is 5 seconds.

5To specify the number of seconds before the WX switch times out an authentication session with an 802.1X client (supplicant), specify the timeout value (1 to 65,535 seconds) in the Supplicant Timeout box. The default is 30 seconds.

6To specify the number of seconds before the WX switch times out a request to an authentication server, specify the timeout value (1 to 65,535 seconds) in the Authentication Server Timeout box. The default is 30 seconds.

7To set the maximum number of times the WX switch retransmits an EAP request to the client before timing out the authentication session, specify the value (0 to 10) in the Maximum Requests box. The default is

2 attempts.

To support SSIDs that have both 802.1X and static WEP clients, MSS sends a maximum of two ID requests, even if this parameter is set to a higher value. Setting the parameter to a higher value does affect all other types of EAP messages.

8To enable encryption key information to be sent to the client after authentication in EAPoL-Key PDUs, select Key Transmit.

The WX switch sends EAPoL key messages after successfully authenticating the client and receiving authorization attributes for the client. If the client is using dynamic Wired-Equivalent Privacy protocol (WEP), the EAPoL key messages are sent immediately after authorization.

To disable this option, clear Key Transmit. By default, this option is enabled.