Table of Contents
Advertisement
360
C
15: M
HAPTER
Managing 802.1X
Client
Reauthentication
Enabling and
Disabling 802.1X
Reauthentication
Setting the Maximum
Number of 802.1X
Reauthentication
Attempts
802.1X
ANAGING
ON THE
Reauthentication of 802.1X wireless supplicants (clients) is enabled on
the WX switch by default. By default, the WX switch waits 3600 seconds
(1 hour) between authentication attempts. You can disable
reauthentication or change the defaults.
The following command enables or disables the reauthentication of
supplicants (clients) by the WX switch:
set dot1x reauth {enable | disable}
Reauthentication is enabled by default.
Type the following command to reenable reauthentication of clients:
WX1200# set dot1x reauth enable
success: dot1x reauthentication enabled.
The following command sets the number of reauthentication attempts
that the WX switch makes before the supplicant (client) becomes
unauthorized:
set dot1x reauth-max number-of-attempts
The default number of reauthentication attempts is 2. You can specify
from 1 to 10 attempts. For example, type the following command to set
the number of authentication attempts to 8:
WX1200# set dot1x reauth-max 8
success: dot1x max reauth set to 8.
Type the following command to reset the maximum number of
reauthorization attempts to the default:
WX1200# clear dot1x reauth-max
success: change accepted.
If the number of reauthentications for a wired authentication client is
greater than the maximum number of reauthentications allowed, MSS
sends an EAP failure packet to the client and removes the client from the
network. However, MSS does not remove a wireless client from the
network under these circumstances.
WX S
WITCH
Advertisement
Table of Contents
