Cisco IE-4000 Software Configuration Manual page 219

Configuring IEEE 802.1x Port-Based Authentication
Information About Configuring IEEE 802.1x Port-Based Authentication
Table 30 Default 802.1x Authentication Settings (continued)
Feature
RADIUS server

IP address

UDP authentication port

Key
Host mode
Control direction
Periodic reauthentication
Number of seconds between
reauthentication attempts
Reauthentication number
Quiet period
Retransmission time
Maximum retransmission number
Client timeout period
Authentication server timeout period
Inactivity timeout
Guest VLAN
Inaccessible authentication bypass
Restricted VLAN
Authenticator (switch) mode
MAC authentication bypass
Voice-aware security
802.1x Accounting
Enabling AAA system accounting with 802.1x accounting allows system reload events to be sent to the accounting
RADIUS server for logging. The server can then infer that all active 802.1x sessions are closed.
Because RADIUS uses the unreliable UDP transport protocol, accounting messages might be lost due to poor network
conditions. If the switch does not receive the accounting response message from the RADIUS server after a configurable
number of retransmissions of an accounting request, this system message appears:
Accounting message %s for session %s failed to receive Accounting Response.
Default Setting

None specified.

1812.

None specified.
Single-host mode.
Bidirectional control.
Disabled.
3600 seconds.
2 times (number of times that the switch restarts the authentication process
before the port changes to the unauthorized state).
60 seconds (number of seconds that the switch remains in the quiet state
following a failed authentication exchange with the client).
30 seconds (number of seconds that the switch should wait for a response to
an EAP request/identity frame from the client before resending the request).
2 times (number of times that the switch will send an EAP-request/identity
frame before restarting the authentication process).
30 seconds (when relaying a request from the authentication server to the
client, the amount of time the switch waits for a response before resending the
request to the client.)
30 seconds (when relaying a response from the client to the authentication
server, the amount of time the switch waits for a reply before resending the
response to the server.)
You can change this timeout period by using the authentication timer server
interface configuration command.
Disabled.
None specified.
Disabled.
None specified.
None specified.
Disabled.
Disabled
215