Users Guide

NOTE: There are several reasons why the supplicant might fail to respond; for example, the supplicant might have been
booting when the request arrived or there might be a physical layer problem.
To configure re-transmissions, use the following commands.
● Configure the amount of time that the authenticator waits before re-transmitting an EAP Request Identity frame.
INTERFACE mode
dot1x tx-period number
The range is from 1 to 65535 (1 year)
The default is 30.
● Configure the maximum number of times the authenticator re-transmits a Request Identity frame.
INTERFACE mode
dot1x max-eap-req number
The range is from 1 to 10.
The default is 2.
The example in Configuring a Quiet Period after a Failed Authentication shows configuration information for a port for which the
authenticator re-transmits an EAP Request Identity frame after 90 seconds and re-transmits for 10 times.
Configuring a Quiet Period after a Failed Authentication
If the supplicant fails the authentication process, the authenticator sends another Request Identity frame after 30 seconds by
default. You can configure this period.
NOTE:
The quiet period (dot1x quiet-period) is the transmit interval after a failed authentication; the Request
Identity Re-transmit interval (dot1x tx-period) is for an unresponsive supplicant.
To configure a quiet period, use the following command.
● Configure the amount of time that the authenticator waits to re-transmit a Request Identity frame after a failed
authentication.
INTERFACE mode
dot1x quiet-period seconds
The range is from 1 to 65535.
The default is 60 seconds.
The following example shows configuration information for a port for which the authenticator re-transmits an EAP Request
Identity frame:
● after 90 seconds and a maximum of 10 times for an unresponsive supplicant
● re-transmits an EAP Request Identity frame
The bold lines show the new re-transmit interval, new quiet period, and new maximum re-transmissions.
DellEMC(conf-if-range-Te-2/1/1)#dot1x tx-period 90
DellEMC(conf-if-range-Te-2/1/1)#dot1x max-eap-req 10
DellEMC(conf-if-range-Te-2/1/1)#dot1x quiet-period 120
DellEMC#show dot1x interface TenGigabitEthernet 2/1/1
802.1x information on Te 2/1/1:
-----------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 10
Auth Type: SINGLE_HOST
90
802.1X