АМАТЕК AN-SGM28P24-400 [182/322] Configuration re authentication mechanism

181 / 322

It must be noted that guest VLAN only supports access mode, nor does it support trunk. Once

the port is configured with guest VLAN, its mode cannot be modified, and guest VLAN can not be

configured in non access mode. When configuring guest VLAN, you must ensure that the VLAN

has been created。

The following command sets the port guest VLAN to 2 in the interface configuration mode：

Switch(config-ge1/1)dot1x guest-vlan 2

11.3.6 Configuration re authentication mechanism

In order to prevent the client from being unaware of the switch and authentication server, the

switch provides a re authentication mechanism that initiates authentication once every other time

interval。

The following command starts the re authentication mechanism in the global CONFIG

mode：

Switch(config)#dot1x reauthenticate

The following command closes the authentication mechanism in global CONFIG mode：

Switch(config)#no dot1x reauthenticate

The following command sets the time interval for re authentication in global CONFIG mode：

Switch(config)#dot1x timeout re-authperiod <interval>

Note: the interval between re authentication should not be too short, otherwise the network

bandwidth and the CPU resource consumption of the switch will be too large。

11.3.7 Maximum number of configuration port access host

Each port of the switch can control the maximum number of access hosts. This function can

restrict users to illegally access to the network by using multiple hosts. The maximum number of

port access host defaults is 100, the maximum can be set to 100. If the maximum number of ports

access host is set to 0, then the port rejects any user access。