02.10.2013 Views

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

FTOS Configuration Guide for the C-Series - Force10 Networks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Configuring Request Identity Re-transmissions<br />

If <strong>the</strong> au<strong>the</strong>nticator sends a Request Identity frame, but <strong>the</strong> supplicant does not respond, <strong>the</strong> au<strong>the</strong>nticator<br />

waits 30 seconds and <strong>the</strong>n re-transmits <strong>the</strong> frame. The amount of time that <strong>the</strong> au<strong>the</strong>nticator waits be<strong>for</strong>e<br />

re-transmitting and <strong>the</strong> maximum number of times that <strong>the</strong> au<strong>the</strong>nticator re-transmits are configurable.<br />

Note: There are several reasons why <strong>the</strong> supplicant might fail to respond; <strong>the</strong> supplicant might have been<br />

booting when <strong>the</strong> request arrived, or <strong>the</strong>re might be a physical layer problem.<br />

To configure <strong>the</strong> amount of time that <strong>the</strong> au<strong>the</strong>nticator waits be<strong>for</strong>e re-transmitting an EAP Request<br />

Identity frame:<br />

Step Task Command Syntax Command Mode<br />

1 Configure <strong>the</strong> amount of time that <strong>the</strong><br />

au<strong>the</strong>nticator waits be<strong>for</strong>e re-transmitting an<br />

EAP Request Identity frame.<br />

dot1x tx-period number<br />

Range: 1-31536000 (1 year)<br />

Default: 30<br />

To configure a maximum number of Request Identity re-transmisions:<br />

INTERFACE<br />

Step Task Command Syntax Command Mode<br />

1 Configure a maximum number of times that a<br />

Request Identity frame can be re-transmitted by<br />

<strong>the</strong> au<strong>the</strong>nticator.<br />

dot1x max-eap-req number<br />

Range: 1-10<br />

Default: 2<br />

INTERFACE<br />

Figure 479 shows configuration in<strong>for</strong>mation <strong>for</strong> a port <strong>for</strong> which <strong>the</strong> au<strong>the</strong>nticator re-transmits an EAP<br />

Request Identity frame after 90 seconds and re-transmits a maximum of 10 times.<br />

Configuring a Quiet Period after a Failed Au<strong>the</strong>ntication<br />

If <strong>the</strong> supplicant fails <strong>the</strong> au<strong>the</strong>ntication process, <strong>the</strong> au<strong>the</strong>nticator sends ano<strong>the</strong>r Request Identity frame<br />

after 30 seconds by default, but this period can be configured.<br />

Note: The quiet period (dot1x quiet-period) is an transmit interval <strong>for</strong> after a failed au<strong>the</strong>ntication where<br />

as <strong>the</strong> Request Identity Re-transmit interval (dot1x tx-period) is <strong>for</strong> an unresponsive supplicant.<br />

<strong>FTOS</strong> <strong>Configuration</strong> <strong>Guide</strong>, version 7.7.1.0 679

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!