Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

Chapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commandsdot1x timeoutCommand HistoryRelease12.2(35)SE212.2(40)SEModificationThis command was introduced.The range for tx-period seconds is incorrect. The correct range is from 1 to65535.Usage GuidelinesYou should change the default value of this command only to adjust for unusual circumstances such asunreliable links or specific behavioral problems with certain clients and authentication servers.The dot1x timeout reauth-period interface configuration command affects the behavior of the switchonly if you have enabled periodic re-authentication by using the dot1x reauthentication interfaceconfiguration command.During the quiet period, the switch does not accept or initiate any authentication requests. If you wantto provide a faster response time to the user, enter a number smaller than the default.When the ratelimit-period is set to 0 (the default), the switch does not ignore EAPOL packets fromclients that have been successfully authenticated and forwards them to the RADIUS server.ExamplesThis example shows how to enable periodic re-authentication and to set 4000 as the number of secondsbetween re-authentication attempts:Switch(config-if)# dot1x reauthenticationSwitch(config-if)# dot1x timeout reauth-period 4000This example shows how to enable periodic re-authentication and to specify the value of theSession-Timeout RADIUS attribute as the number of seconds between re-authentication attempts:Switch(config-if)# dot1x reauthenticationSwitch(config-if)# dot1x timeout reauth-period serverThis example shows how to set 30 seconds as the quiet time on the switch:Switch(config-if)# dot1x timeout quiet-period 30This example shows how to set 45 seconds as the switch-to-authentication server retransmission time:Switch(config)# dot1x timeout server-timeout 45This example shows how to set 45 seconds as the switch-to-client retransmission time for the EAPrequest frame:Switch(config-if)# dot1x timeout supp-timeout 45This example shows how to set 60 as the number of seconds to wait for a response to anEAP-request/identity frame from the client before re-transmitting the request:Switch(config-if)# dot1x timeout tx-period 60This example shows how to set 30 as the number of seconds that the switch ignores EAPOL packets fromsuccessfully authenticated clients:Switch(config-if)# dot1x timeout ratelimit-period 30You can verify your settings by entering the show dot1x privileged EXEC command.OL-9776-08Catalyst 3750-E and 3560-E Switch Command Reference2-179