Configuring Authentication Hold-Off, Timeout, And Interval - Allen-Bradley Stratix 5100 User Manual

Chapter 12 Configuring Authentication Types
Configuring Authentication
Hold-off, Timeout, and
Interval
368
Beginning in privileged EXEC mode, follow these steps to configure hold-off
times, reauthentication periods, and authentication timeouts for client devices
authenticating through your access point:
1. Enter global configuration mode.
configure terminal
2. Enter the number of seconds a client device must wait before it can
reattempt to authenticate following a failed authentication.
dot11 holdoff-time seconds
The hold-off time is invoked when a client fails three login attempts or
fails to respond to three authentication requests from the access point.
Enter a value from 1...65555 seconds.
3. Enter the number of seconds the access point must wait for a client to reply
to an EAP/dot1x message before the authentication fails. Enter a value
from 1...120 seconds.
dot1x timeout supp-response seconds [local]
The RADIUS server can be configured to send a different timeout value
that overrides the one that is configured. Enter the
configure the access point to ignore the RADIUS server value and use the
configured value.
The optional
no
seconds.
4. Enter interface configuration mode for the radio interface.
interface dot11radio { 0 | 1 }
• The 2.4 GHz radio and the 2.4 GHz 802.11n radio is 0.
• The 5 GHz radio and the 5 GHz 802.11n radio is 1.
5. Enter the interval in seconds that the access point waits before forcing an
authenticated client to reauthenticate.
dot1x reauth-period { seconds | server }
Enter the server keyword to configure the access point to use the
reauthentication period specified by the authentication server. If you use
this option, configure your authentication server with RADIUS attribute
27, Session-Timeout.
This attribute sets the maximum number of seconds of service to be
provided to the client before termination of the session or prompt. The
server sends this attribute to the access point when a client device performs
EAP authentication.
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
keyword resets the timeout to its default state, 30
keyword to
local