API Guide

Identity retransmissions
If the authenticator sends a Request Identity frame but the supplicant does not respond, the authenticator waits 30 seconds
and then retransmits the frame. There are several reasons why the supplicant might fail to respond — the supplicant maybe
booting when the request arrived, there may be a physical layer problem, and so on.
1. Configure the amount of time that the authenticator waits before retransmitting an EAP Request Identity frame in
INTERFACE mode, from 1 to 65535 – 1 year, default 60.
dot1x timeout tx-period seconds
2. Configure a maximum number of times the authenticator retransmits a Request Identity frame in INTERFACE mode from 1 to
10, default 2.
dot1x max-req retry-count
Configure and verify retransmission time
OS10(config)# dot1x system-auth-control
OS10(config)# interface range ethernet 1/1/7-1/1/8
OS10(conf-range-eth1/1/7-1/1/8)# dot1x timeout tx-period 120
OS10(conf-range-eth1/1/7-1/1/8)# dot1x max-req 5
OS10(conf-range-eth1/1/7-1/1/8)# do show dot1x interface ethernet 1/1/7
802.1x information on ethernet1/1/7
-------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Enable
Tx Period: 120 seconds
Quiet Period: 60 seconds
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 5
Host Mode: MULTI_HOST
Auth PAE State: Initialize
Backend State: Idle
View interface running configuration
OS10(conf-range-eth1/1/7-1/1/8)# do show running-configuration interface
...
!
interface ethernet1/1/7
no shutdown
dot1x max-req 5
dot1x port-control auto
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout tx-period 120
!
interface ethernet1/1/8
no shutdown
dot1x max-req 5
dot1x port-control auto
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout tx-period 120
...
Failure quiet period
If the supplicant fails the authentication process, the authenticator sends another Request Identity frame after 30 seconds by
default. The quiet period is a transmit interval time after a failed authentication.
402
Layer 2