Users Guide

Security Commands 1001
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
It is possible to configure the periodic re-authentication timer by sending the
IETF Session-Timeout attribute in the RADIUS Access-Accept. If periodic
re-authentication is not enabled, the session will be terminated and the
802.1X client will need to authenticate again to access the network.
If re-authentication is enabled, the switch will initiate re-authentication and
terminate the session only if the client fails re-authentication.
Example
The following example enables periodic reauthentication of the client.
console(config)# interface gigabitethernet 1/0/16
console(config-if-Gi1/0/16)# dot1x reauthentication
dot1x system-auth-control
Use the dot1x system-auth-control command in Global Configuration mode
to enable 802.1x globally. To disable 802.1x globally, use the no form of this
command.
Syntax
dot1x system-auth-control
no dot1x system-auth-control
Default Configuration
The default for this command is disabled.
Command Mode
Global Configuration mode