Configuring the authentication trigger feature

The authentication trigger feature enables the access device to initiate 802.1X authentication when 802.1X clients cannot initiate authentication.

This feature provides the multicast trigger and unicast trigger (see 802.1X authentication initiation in "802.1X overview").

• Enable the multicast trigger on a port when the clients attached to the port cannot send EAPOL-Start packets to initiate 802.1X authentication.

• Enable the unicast trigger on a port if only a few 802.1X clients are attached to the port and these clients cannot initiate authentication.

• To avoid duplicate authentication packets, do not enable both triggers on a port.

1. Enter system view.

   system-view

2. (Optional.) Set the username request timeout timer.

   dot1x timer tx-period tx-period-value

   The default is 30 seconds.

3. Enter interface view.

   interface interface-type interface-number

4. Enable an authentication trigger.

   dot1x { multicast-trigger | unicast-trigger }

   By default, the multicast trigger is enabled, and the unicast trigger is disabled.