Users Guide

Authentication, Authorization, and Accounting 339
Configuring Additional 802.1X Interface Settings
Use the following commands to configure 802.1X interface settings such as
the reauthentication period and switch-to-client retransmission time.
NOTE: To enable 802.1X Monitor Mode to help troubleshoot authentication issues,
use the authentication monitor command in Global Configuration mode. To view
802.1X authentication events and information, use the show authentication
authentication-history {interface | all} [failed-auth-only] [detail] command. To clear
the history, use the clear authentication authentication-history command in
Privileged Exec mode.
Command Purpose
configure Enter Global Configuration mode.
interface interface Enter interface configuration mode for the specified
interface. The interface variable includes the interface type
and number, for example tengigabitethernet 1/0/3.
A range of interfaces can be specified using the interface
range command. For example, interface range
tengigabitethernet 1/0/8-12 configures interfaces 8, 9, 10,
11, and 12.
authentication periodic Enable periodic re-authentication of the client.
authentication timer
reauthenticate seconds
Set the number of seconds between re-authentication
attempts.
dot1x timeout server-
timeout seconds
Set the time that the switch waits for a response from the
authentication server.
dot1x timeout tx-period
seconds
Set the number of seconds that the switch waits for a
response to an Extensible Authentication Protocol (EAP)-
request/identity frame from the client before resending the
request.
dot1x timeout quiet-
period seconds
Set the number of seconds that the switch remains in the
quiet state following a failed authentication exchange (for
example, the client provided an invalid password).
dot1x timeout supp-
timeout seconds
Set the time that the switch waits for a response before
retransmitting an Extensible Authentication Protocol
(EAP)-request frame to the client.