< Home

Configuring the Authentication Timeout Timer for 802.1X Clients

This section provides a sample of configuring the authentication timeout timer for 802.1X clients using the merge method.

Table 1 Configuring the authentication timeout timer for 802.1X clients

Operation

XPATH

edit-config:merge

/huawei-nac-dot1x:dot1x-access/configure-mode/unified-mode/dot1x-access-profile/retry-function/client-time-out

/huawei-nac-dot1x:dot1x-access/configure-mode/unified-mode/dot1x-access-profile/retry-function/max-retry

Data Requirements

Table 2 Configuring the authentication timeout timer for 802.1X clients

Item

Data

Description

name

test

Configure the 802.1X access profile named test.

client-time-out

8

Set the client authentication timeout interval to 8 seconds.

max-retry

3

Set the number of times an authentication request packet retransmitted to an 802.1X user to 3.

Request Example

<rpc message-id="0" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
  <edit-config>
    <target>
      <running/>
    </target>
    <config>
      <hw-nac-dot1x:dot1x-access xmlns:hw-nac-dot1x="urn:huawei:params:xml:ns:yang:huawei-nac-dot1x">
        <hw-nac-dot1x:dot1x-access-profile xmlns:xc="urn:ietf:params:xml:ns:netconf:base:1.0" xc:operation="merge">
          <hw-nac-dot1x:name>test</hw-nac-dot1x:name>
          <hw-nac-dot1x:retry-function>
            <hw-nac-dot1x:client-time-out>8</hw-nac-dot1x:client-time-out>
            <hw-nac-dot1x:max-retry>3</hw-nac-dot1x:max-retry>
          </hw-nac-dot1x:retry-function>
        </hw-nac-dot1x:dot1x-access-profile>
      </hw-nac-dot1x:dot1x-access>
    </config>
  </edit-config>
</rpc>

Response Example

Sample of successful response

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="0">
 <ok/>
</rpc-reply>

Sample of failed response

<?xml version='1.0' encoding='UTF-8'?>
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="6">
  <rpc-error>
    <error-type>application</error-type>
    <error-tag>operation-failed</error-tag>
    <error-severity>error</error-severity>
    <error-path>/huawei-nac-dot1x:dot1x-access/dot1x-access-profile[name='hufeng']/retry-function/client-time-out</error-path>
    <error-message>parse rpc config error.(Value "121" does not satisfy the constraint "1..120" (range, length, or pattern).).</error-message>
  </rpc-error>
</rpc-reply>
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >