Filter
Top Products
Advanced Configuration
5-17
all associated wireless clients. If 802.1x authentication is not
initiated by a client, the access point will initiate authentication.
Only those clients successfully authenticated with 802.1x are
allowed to access the network.
When 802.1x is enabled, the broadcast and session key rotation
intervals can also be configured.
• Broadcast Key Refresh Rate: Sets the interval at which the
broadcast keys are refreshed for stations using 802.1x
dynamic keying. (Range: 0-1440 minutes; Default: 0 means
disabled)
• Session Key Refresh Rate: The interval at which the access
point refreshes unicast session keys for associated clients.
(Range: 0-1440 minutes; Default: 0 means disabled)
• 802.1x Re-authentication Refresh Rate: The time period after
which a connected client must be re-authenticated. During the
re-authentication process of verifying the client’s credentials
on the RADIUS server, the client remains connected the
network. Only if re-authentication fails is network access
blocked. (Range: 0-65535 seconds; Default: 0 means
disabled)
CLI Commands for Local MAC Authentication – Use the
mac-authentication server command from the global
configuration mode to enable local MAC authentication. Set the
default for MAC addresses not in the local table using the
address filter default command, then enter MAC addresses in
the local table using the address filter entry command. To