Dot1X Max-Reauth-Req - Cisco Catalyst 3560X-24P Command Reference Manual

dot1x max-reauth-req

dot1x max-reauth-req
Use the dot1x max-reauth-req interface configuration command on the switch stack or on a standalone
switch to set the maximum number of times that the switch restarts the authentication process before a
port changes to the unauthorized state. Use the no form of this command to return to the default setting.
Syntax Description
count
Defaults The default is 2 times.
Command Modes Interface configuration
Command History Release
12.2(53)SE2
Usage Guidelines You should change the default value of this command only to adjust for unusual circumstances such as
unreliable links or specific behavioral problems with certain clients and authentication servers.
Examples This example shows how to set 4 as the number of times that the switch restarts the authentication
process before the port changes to the unauthorized state:
Switch(config-if)# dot1x max-reauth-req 4
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command
dot1x max-req
Catalyst 3750-X and 3560-X Switch Command Reference
2-174
dot1x max-reauth-req count
no dot1x max-reauth-req
Sets the number of times that switch retransmits EAPOL-Identity-Request
frames to start the authentication process before the port changes to the
unauthorized state. If a non-802.1x capable device is connected to a port, the
switch retries two authentication attempts by default. If a guest VLAN is
configured on the port, after two re-authentication attempts, the port is
authorized on the guest vlan by default. The range is 1 to 10. The default is 2.
Modification
This command was introduced.
Chapter 2
Description
Sets the maximum number of times that the switch forwards an EAP
frame (assuming that no response is received) to the authentication server
before restarting the authentication process.
Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
OL-21522-02