Cisco WS-C3560E-48PD-SF Command Reference - Page 137

Chapter 2 Catalyst 3560 Switch Cisco IOS Commands dot1x timeout Usage Guidelines You should change the default value of this command only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and authentication servers. The dot1x timeout reauth-period interface configuration command affects the behavior of the switch only if you have enabled periodic re-authentication by using the dot1x reauthentication interface configuration command. During the quiet period, the switch does not accept or initiate any authentication requests. If you want to provide a faster response time to the user, enter a number smaller than the default. Examples This example shows how to enable periodic re-authentication and to set 4000 as the number of seconds between re-authentication attempts: Switch(config-if)# dot1x reauthentication Switch(config-if)# dot1x timeout reauth-period 4000 This example shows how to enable periodic re-authentication and to specify the value of the Session-Timeout RADIUS attribute as the number of seconds between re-authentication attempts: Switch(config-if)# dot1x reauthentication Switch(config-if)# dot1x timeout reauth-period server This example shows how to set 30 seconds as the quiet time on the switch: Switch(config-if)# dot1x timeout quiet-period 30 This example shows how to set 45 seconds as the switch-to-authentication server retransmission time: Switch(config)# dot1x timeout server-timeout 45 This example shows how to set 45 seconds as the switch-to-client retransmission time for the EAP request frame: Switch(config-if)# dot1x timeout supp-timeout 45 This example shows how to set 60 as the number of seconds to wait for a response to an EAP-request/identity frame from the client before re-transmitting the request: Switch(config-if)# dot1x timeout tx-period 60 You can verify your settings by entering the show dot1x privileged EXEC command. Related Commands Command dot1x max-req dot1x reauthentication show dot1x Description Sets the maximum number of times that the switch sends an EAP-request/identity frame before restarting the authentication process. Enables periodic re-authentication of the client. Displays IEEE 802.1x status for all ports. 78-16405-05 Catalyst 3560 Switch Command Reference 2-105