Cisco WS-C2980G-A Software Guide - Page 508

Configuring 802.1x Authentication on the Switch Chapter 31 Configuring 802.1x Authentication Setting and Enabling Automatic Reauthentication of the Host You can specify how often 802.1x authentication reauthenticates the host if you do so prior to enabling automatic 802.1x host reauthentication. If you do not specify a time period prior to enabling host reauthentication, 802.1x defaults to 3600 seconds (the valid values are from 1-65,535 seconds). You can enable automatic 802.1x host reauthentication for hosts that are connected to a specific port. To manually reauthenticate the host that is connected to a specific port, see the "Manually Reauthenticating the Host" section on page 31-10. To set how often 802.1x authentication reauthenticates the host and enable automatic 802.1x reauthentication, perform this task in privileged mode: Step 1 Step 2 Step 3 Task Set the time constant for reauthenticating the host. Enable reauthentication. Verify the 802.1x configuration. Command set dot1x re-authperiod seconds set port dot1x mod/port re-authentication enable show port dot1x mod/port This example shows how to set automatic reauthentication to 7200 seconds, enable 802.1x reauthentication, and verify the configuration: Console> (enable) set dot1x re-authperiod 7200 dot1x re-authperiod set to 7200 seconds Console> (enable) set port dot1x 4/1 re-authentication enable Port 4/1 re-authentication enabled. Console> (enable) show port dot1x 4/1 Port Auth-State BEnd-State Port-Control Port-Status 4/1 connecting finished auto unauthorized Port Multiple Host Re-authentication 4/1 disabled enabled Manually Reauthenticating the Host You can manually reauthenticate the host that is connected to a specific port at any time. When you want to configure automatic 802.1x host reauthentication, see the "Setting and Enabling Automatic Reauthentication of the Host" section on page 31-10. To manually reauthenticate a host that is connected to a specific port, perform this task in privileged mode: Task Command Manually reauthenticate the host that is connected set port dot1x mod/port re-authenticate to a specific port. This example shows how to manually reauthenticate the host that is connected to port 1 on module 4: Console> (enable) set port dot1x 4/1 re-authenticate Port 4/1 re-authenticating... dot1x re-authentication successful... dot1x port 4/1 authorized. 31-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01