Default Settings For 802.1X - Cisco Nexus 9000 Series Configuration Manual

Configuring 802.1X
• Selective enabling or disabling of dot1x on N9K-M12PQ uplink module ports is not supported for Cisco
• A security violation occurs when the same mac is learnt on a different VLAn with dot1x enabled on the
• Configuring mac learn disable with dot1x enabled on DME enabled platform does not display the error
• In Cisco Nexus Release 9.2(1), tagged EAPOL frames are processed even though the VLAN is not
• Secure mac learnt on orphan port is not synced on the vPC peer.

Default Settings for 802.1X

This table lists the default settings for 802.1X parameters.
Table 11: Default 802.1X Parameters
Parameters
802.1X feature
AAA 802.1X authentication method
Per-interface 802.1X protocol enable
state
Periodic reauthentication
Number of seconds between
reauthentication attempts
Quiet timeout period
Retransmission timeout period
Maximum retransmission number
Host mode
Nexus 9300 platform switches.
interface.
messages.
configured on the interface and the authentication is successful on the interface for the client.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Default
Disabled
Not configured
Disabled (force-authorized)
The port transmits and receives normal traffic without
Note
802.1X-based authentication of the supplicant.
Disabled
3600 seconds
60 seconds (number of seconds that the Cisco NX-OS device remains
in the quiet state following a failed authentication exchange with
the supplicant)
30 seconds (number of seconds that the Cisco NX-OS device should
wait for a response to an EAP request/identity frame from the
supplicant before retransmitting the request)
2 times (number of times that the Cisco NX-OS device will send an
EAP-request/identity frame before restarting the authentication
process)
Single host
Default Settings for 802.1X
185