To configure a maximum number of re-authentications:
Step
Task
1
Configure the maximum number of
times that the supplicant can be
reauthenticated.
FTOS(conf-if-Te-0/0)#dot1x reauthentication interval 7200
FTOS(conf-if-Te-0/0)#dot1x reauth-max 10
FTOS(conf-if-Te-0/0)#do show dot1x interface TenGigabitEthernet 0/0
802.1x information on Te 0/0:
-----------------------------
Dot1x Status:
Port Control:
Port Auth Status:
Re-Authentication:
Untagged VLAN id:
Tx Period:
Quiet Period:
ReAuth Max:
Supplicant Timeout:
Server Timeout:
Re-Auth Interval:
Max-EAP-Req:
Auth Type:
Auth PAE State:
Backend State:
Auth PAE State:
Backend State:
Configuring Timeouts
If the supplicant or the authentication server is unresponsive, the authenticator terminates the
authentication process after 30 seconds by default. This amount of time that the authenticator waits for a
response can be configured.
To terminate the authentication process due to an unresponsive supplicant:
Step
Task
1
Terminate the authentication process due to an
unresponsive supplicant.
96
|
802.1X
Command Syntax
dot1x reauth-max number
Range: 1-10
Default: 2
Enable
FORCE_AUTHORIZED
UNAUTHORIZED
Enable
None
90 seconds
120 seconds
10
30 seconds
30 seconds
7200 seconds
10
SINGLE_HOST
Initialize
Initialize
Initialize
Initialize
Command Syntax
dot1x supplicant-timeout seconds
Range: 1-300
Default: 30
Command Mode
INTERFACE
Command Mode
INTERFACE