Default 802.1X Port-Based Authentication Configuration; X Port-Based Authentication Guidelines And Restrictions - Cisco 7604 Configuration Manual

Default 802.1X Port-Based Authentication Configuration

Default 802.1X Port-Based Authentication Configuration
Table 46-1
Table 46-1 Default 802.1X Configuration
Feature
Authentication, authorization, and
accounting (AAA)
RADIUS server IP address
RADIUS server UDP authentication port
RADIUS server key
Per-interface 802.1X protocol enable state
Periodic reauthentication
Number of seconds between
reauthentication attempts
Quiet period
Retransmission time
Maximum retransmission number
Multiple host support
Client timeout period
Authentication server timeout period

802.1X Port-Based Authentication Guidelines and Restrictions

When configuring 802.1X port-based authentication, follow these guidelines and restrictions:
•
•
Cisco 7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
46-6
shows the default 802.1X configuration.
When 802.1X is enabled, ports are authenticated before any other Layer 2 or Layer 3 features are
enabled.
The 802.1X protocol is supported on both Layer 2 static-access ports and Layer 3 routed ports, but
it is not supported on these port types:
Chapter 46 Configuring IEEE 802.1X Port-Based Authentication
Default Setting
Disabled
None specified
1812
None specified
Disabled (force-authorized)
The port transmits and receives normal traffic
Note
without 802.1X-based authentication of the
client.
Disabled
3600 seconds
60 seconds (number of seconds that the router remains in
the quiet state following a failed authentication exchange
with the client)
30 seconds (number of seconds that the router should
wait for a response to an EAP request/identity frame
from the client before retransmitting the request)
2 times (number of times that the router will send an
EAP-request/identity frame before restarting the
authentication process)
Disabled
30 seconds (when relaying a request from the
authentication server to the client, the amount of time the
router waits for a response before retransmitting the
request to the client)
30 seconds (when relaying a response from the client to
the authentication server, the amount of time the router
waits for a reply before retransmitting the response to the
server)
OL-4266-08