Enabling Periodic Re-Authentication - Cisco Catalyst 2950 Software Configuration Manual

Chapter 9 Configuring IEEE 802.1x Port-Based Authentication
Command
Step 5 dot1x timeout reauth-period {seconds |
server}
Step 6
end
Step 7
show dot1x interface interface-id
Step 8 copy running-config startup-config
This example shows how to configure IEEE 802.1x using a RADIUS server:
Switch# configure terminal
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# dot1x reauthentication
Switch(config-if)# dot1x timeout reauth-period server

Enabling Periodic Re-Authentication

You can enable periodic IEEE 802.1x client re-authentication and specify how often it occurs. If you do
not specify a time period before enabling re-authentication, the number of seconds between
re-authentication attempts is 3600.
Beginning in privileged EXEC mode, follow these steps to enable periodic re-authentication of the client
and to configure the number of seconds between re-authentication attempts. This procedure is optional.
Command
Step 1 configure terminal
Step 2
interface interface-id
Step 3 dot1x reauthentication
Step 4 dot1x timeout reauth-period {seconds |
server}
78-11380-12
Purpose
Set the number of seconds between re-authentication attempts.
The keywords have these meanings:
• seconds—Sets the number of seconds from 1 to 65535; the default is
3600 seconds.
server—Sets the number of seconds as the value of the
•
Session-Timeout RADIUS attribute (Attribute[27]).
This command affects the behavior of the switch only if periodic
re-authentication is enabled.
Return to privileged EXEC mode.
Verify your IEEE 802.1x authentication configuration.
(Optional) Save your entries in the configuration file.
Purpose
Enter global configuration mode.
Specify the interface to be configured, and enter interface configuration
mode.
Enable periodic re-authentication of the client, which is disabled by
default.
The keywords have these meanings:
seconds—Sets the number of seconds from 1 to 65535; the default is
•
3600 seconds.
server—Sets the number of seconds as the value of the
•
Session-Timeout RADIUS attribute (Attribute[27]). You can use this
keyword when the switch uses NAC Layer 2 IEEE 802.1x.
The server keyword is not supported on Catalyst 2950 LRE
Note
switches.
This command affects the behavior of the switch only if periodic
re-authentication is enabled.
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
Configuring IEEE 802.1x Authentication
9-17