Users Guide

Security Commands 1083
• seconds — Time in seconds that the switch remains in the quiet state
following a failed authentication exchange with the client. (Range: 0–
65535 seconds)
Default Configuration
Each timer has a default as follows:
• quiet-period: 60 seconds
• tx-period: 30 seconds
• supp-timeout: 30 seconds
• server-timeout: 30 seconds
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
Change the default value of the 802.1X/AAA timers only to adjust for unusual
circumstances, such as unreliable links or specific behavioral problems with
certain clients or authentication servers. Changing these values may result in
RADIUS server timeouts, failed authentications or switch behavior that is not
responsive to 802.1X clients, potentially including denial of network access.
It is strongly recommended that the authentication server be present within
the local site to ensure access to the network. Configuring the switch to use a
remote Active Directory or other authentication server operating over a
congested or unreliable link will not give local 802.1X clients a responsive
experience and may deny 802.1X clients access to the network.
The RADIUS server relies on the DNS service to resolve RADIUS host names.
A slow to respond DNS server will cause delays in processing of 802.1X client
authentications. An unresponsive DNS server will deny network access to
802.1X clients. It is strongly recommended that a local DNS server be used
whenever possible. Configuring the switch to use a remote Active Directory
or other DNS server operating over a congested or unreliable link will not give
local 802.1X clients a responsive experience and may deny 802.1X client
access.
Quiet-period: