Enabling Periodic Reauthentication - Cisco 7609 Configuration Manual

Configuring 802.1X Port-Based Authentication
Note You also need to configure some settings on the RADIUS server. These settings include the IP address
of the router and the key string to be shared by both the server and the router. For more information, refer
to the RADIUS server documentation.
This example shows how to configure the RADIUS server parameters on the router:
Router# configure terminal
Router(config)# ip radius source-interface Vlan80
Router(config)# radius-server host 172.l20.39.46
Router(config)# radius-server key rad123
Router(config)# end

Enabling Periodic Reauthentication

You can enable periodic 802.1X client reauthentication and specify how often it occurs. If you do not
specify a time period before enabling reauthentication, the number of seconds between reauthentication
attempts is 3600.
Automatic 802.1X client reauthentication is a global setting and cannot be set for clients connected to
individual ports. To manually reauthenticate the client connected to a specific port, see the
Reauthenticating the Client Connected to a Port" section on page
To enable periodic reauthentication of the client and to configure the number of seconds between
reauthentication attempts, perform this task:
Command
Step 1
Router(config)# interface type
Step 2
Router(config-if)# dot1x reauthentication
Router(config-if)# no dot1x reauthentication
Step 3
Router(config-if)# dot1x timeout re-authperiod
seconds
Router(config-if)# no dot1x timeout re-authperiod
Step 4
Router(config-if)# end
Step 5
Router# show dot1x all
1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet
This example shows how to enable periodic reauthentication and set the number of seconds between
reauthentication attempts to 4000:
Router(config-if)# dot1x reauthentication
Router(config-if)# dot1x timeout re-authperiod 4000
Cisco 7600 Series Router Cisco IOS Software Configuration Guide—12.1E
25-10
Purpose
1
Selects an interface to configure.
slot/port
Enables periodic reauthentication of the client, which is
disabled by default.
Disables periodic reauthentication of the client.
Sets the number of seconds between reauthentication
attempts.
The range is 1 to 4294967295; the default is 3600
seconds.
This command affects the behavior of the router only if
periodic reauthentication is enabled.
Returns to the default reauthorization period.
Returns to privileged EXEC mode.
Verifies your entries.
Chapter 25 Configuring IEEE 802.1X Port-Based Authentication
25-11.
"Manually
78-14064-04