Managing 802.1X Client Reauthentication - D-Link DWS-1008 User Manual

DWS-1008 User's Manual
Note: To support SSIDs that have both 802.1X and static WEP clients, MSS sends a maximum
of two ID requests, even if this parameter is set to a higher value. Setting the parameter to a
higher value does affect all other types of EAP messages.

Managing 802.1X Client Reauthentication

Reauthentication of 802.1X wireless supplicants (clients) is enabled on the switch by
default. By default, the switch waits 3600 seconds (1 hour) between authentication
attempts. You can disable reauthentication or change the defaults.
Note: You also can use the RADIUS session-timeout attribute to set the reauthentication
timeout for a specific client. In this case, MSS uses the timeout that has the lower value. If the
session-timeout is set to fewer seconds than the global reauthentication timeout, MSS uses
the session-timeout for the client. However, if the global reauthentication timeout is shorter
than the session-timeout, MSS uses the global timeout instead.
Enabling and Disabling 802.1X Reauthentication
The following command enables or disables the reauthentication of supplicants (clients) by
the switch:
set dot1x reauth {enable | disable}
Reauthentication is enabled by default.
Type the following command to reenable reauthentication of clients:
DWS-1008# set dot1x reauth enable
success: dot1x reauthentication enabled.
Setting the Maximum Number of 802.1X Reauthentication Attempts
The following command sets the number of reauthentication attempts that the switch makes
before the supplicant (client) becomes unauthorized:
set dot1x reauth-max number-of-attempts
The default number of reauthentication attempts is 2. You can specify from 1 to 10
attempts. For example, type the following command to set the number of authentication
attempts to 8:
DWS-1008# set dot1x reauth-max 8
success: dot1x max reauth set to 8.
Type the following command to reset the maximum number of reauthorization attempts to the
default:
DWS-1008# clear dot1x reauth-max
success: change accepted.
D-Link Systems, Inc.
Managing 802.1X
332