< Home

authentication timer handshake-period

Function

The authentication timer handshake-period command sets the handshake interval of the device with pre-connection users and authorized users.

The undo authentication timer handshake-period command restores the default setting.

The default handshake interval of the device with pre-connection users and authorized users is 300 seconds.

Format

authentication timer handshake-period handshake-period

undo authentication timer handshake-period

Parameters

Parameter

Description

Value

handshake-period

Specifies the handshake interval.

The value is an integer in the range from 5 to 7200, in seconds.

Views

Authentication profile view

Default Level

2: Configuration level

Usage Guidelines

  • This function takes effect only for users who go online after this function is successfully configured.

  • The handshake function can be implemented using ARP packets.
  • If the number of ARP probe packets exceeds the default CAR value, the probe fails and the users are logged out. To resolve the problem, the following methods are recommended:
    • Increase the handshake interval based on the number of users. The default handshake interval is recommended when there are less than 8000 users; the handshake interval should be no less than 600 seconds when there are more than 8000 users.
    • Deploy the port attack defense function on the access device and limit the rate of packets sent to the CPU.

Example

# In the authentication profile p1, set the handshake interval of the device with pre-connection users and authorized users to 200 seconds.

<sysname> system-view
[sysname] authentication-profile name p1
[sysname-authentication-profile-p1] authentication timer handshake-period 200
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >