Table of Contents
Advertisement
Description
Use the dot1x re-authenticate command to enable the periodic online user re-authentication function.
Use the undo dot1x re-authenticate command to disable the function.
By default, the periodic online user re-authentication function is disabled.
Periodic re-authentication enables the access device to periodically authenticate online 802.1X users on a
port. This function tracks the connection status of online users and updates the authorization attributes
assigned by the server, such as the ACL, VLAN, and user profile-based QoS.
You can use the dot1x timer reauth-period command to configure the interval for re-authentication.
Related commands: dot1x timer reauth-period.
Examples
# Enable the 802.1X periodic online user re-authentication function on GigabitEthernet 1/0/1 and set the
periodic re-authentication interval to 1800 seconds.
<Sysname> system-view
[Sysname] dot1x timer reauth-period 1800
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dot1x re-authenticate
dot1x retry
Syntax
dot1x retry max-retry-value
undo dot1x retry
View
System view
Default level
2: System level
Parameters
max-retry-value: Specifies the maximum number of attempts for sending an authentication request to a
client, in the range 1 to 10.
Description
Use the dot1x retry command to set the maximum number of attempts for sending an authentication
request to a client.
Use the undo dot1x retry command to restore the default.
By default, the maximum number of attempts that the device can send an authentication request to a client
is twice.
After the network access device sends an authentication request to a client, if the device receives no
response from the client within the username request timeout timer (by the dot1x timer tx-period tx-period-
value command) or the client timeout timer (by the dot1x timer supp-timeout supp-timeout-value
command), the device retransmits the authentication request. If the number of transmission attempts
exceeds the specified upper limit but the device still receives no response, it stops transmitting the request.
This command applies to all ports of the device.
111
Advertisement
Table of Contents
