FTOS Command Reference for the S-Series - Force10 Networks

dot1x max-eap-req
Related
Commands
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1x
capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the
device, will occur at the next re-authentication interval (dot1x reauthentication).
If the host fails authentication for the designated amount of times, the authenticator places the
port in authentication failed VLAN (dot1x auth-fail-vlan).
dot1x max-eap-req
c e s Configure the maximum number of times an EAP (Extensive Authentication Protocol)
request is transmitted before the session times out.
Syntax dot1x max-eap-req number
Parameters
Defaults 2
Command Modes INTERFACE
Command
History
Related
Commands
Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created
regardless if the VLAN is assigned to an interface or not. Once an interface is
assigned a guest VLAN (which has an IP address), then routing through the guest
VLAN is the same as any other traffic. However, interface may join/leave a VLAN
dynamically.
dot1x auth-fail-vlan Configure a VLAN for authentication failures
dot1x reauthentication Enable periodic re-authentication
show dot1x interface Display the 802.1x information on an interface
To return to the default, use the no dot1x max-eap-req command.
number Enter the number of times an EAP request is transmitted before a session
time-out.
Range: 1 to 10
Default: 2
Version 7.6.1.0 Introduced on C-Series and S-Series
Version 7.4.1.0 Introduced on E-Series
interface range Configure a range of interfaces
196 Security Commands