Users Guide

Security Commands 1104
This command limits the number of times an EAP-Request is sent without
receiving an EAP-Response. EAP-Requests are sent during the 802.1X
authentication process to 802.1X aware hosts. Use the dot1x max-reauth-req
command to limit the number of repeated EAP Request/Identity messages.
Example
The following example sets the number of times that the switch sends an
EAP-request frame for which no EAP-Response is received to 6.
console(config)# interface gigabitethernet 1/0/16
console(config-if-Gi1/0/16)# dot1x max-req 6
dot1x max-start
Use this command to configure the number of EAPOL start frames that the
switch supplicant sends to initiate authentication before it concludes that
there is no authenticator connected. Use the no form of the command to set
the count to the default.
Syntax
dot1x max-start count
no dot1x max-start
•
count — The number of EAPOL-Start frames to send. The range is 1 to
10.
Default Configuration
The default count is 3.
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
The supplicant state machine sends an EAPOL-Start packet every dot1x
start-period seconds.
If the max-start count is exceeded, the supplicant state machine waits for the
expiry of the held period before attempting to re-authenticate.