Filter
Top Products
802.1X | 117
To configure a maximum number of re-authentications:
Figure 7-9. Configuring a Reauthentiction Period
Configuring Timeouts
If the supplicant or the authentication server is unresponsive, the authenticator terminates the
authentication process after 30 seconds by default. The amount of time that the authenticator waits for a
response can be configured. The timeout for the supplicant applies to all EAP frames except for Request
Identity frames which are governed by the
tx-period and max-eap-req configurations.
To terminate the authentication process due to an unresponsive supplicant:
Step Task Command Syntax Command Mode
1 Configure the maximum number of
times that the supplicant can be
reauthenticated.
dot1x reauth-max number
Range: 1-10
Default: 2
INTERFACE
Step Task Command Syntax Command Mode
1 Terminate the authentication process due to an
unresponsive supplicant.
dot1x supplicant-timeout seconds
Range: 1-300. Default: 30
INTERFACE
FTOS(conf-if-gi-2/1)#dot1x reauthentication interval 7200
FTOS(conf-if-gi-2/1)#dot1x reauth-max 10
FTOS(conf-if-gi-2/1)#do show dot1x interface gigabitethernet 2/1
802.1x information on Gi 2/1:
-----------------------------
Dot1x Status: Enable
Port Control: FORCE_AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Enable
Untagged VLAN id: None
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 10
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 7200 seconds
Max-EAP-Req: 10
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
Auth PAE State: Initialize
Backend State: Initialize
Re-authentication Enabled
New Re-authentication Period
New Maximum Re-authentications