CLI Guide

Security Commands 1085
Example
The following command enables 802.1x monitor mode globally. Clients are
always authenticated in monitor mode. Use of monitor mode in a production
network should be restricted to test user accounts. Never use monitor mode
for real user accounts.
console(config)# authentication monitor
dot1x timeout
Use the dot1x timeout command in Interface Configuration mode to set the
values of the various 802.1x state machine timers. To return to the default
setting, use the no form of this command.
Syntax
dot1x timeout { quiet-period | tx-period | server-timeout | supp-timeout }
{seconds}
no dot1x timeout
• quiet-period—The time, in seconds, during which the authenticator state
machine will not attempt to acquire a supplicant. This is the period for
which the authenticator state machine stays in the HELD state.
• tx-period—The time, in seconds, between successive EAPOL EAP
Request/Identity frames are sent to the supplicant.
• server-timeout—The time, in seconds, the authenticator will wait for a
response before timing out a RADIUS server.
• supp-timeout—The time, in seconds, the authenticator will wait for a
response before timing out a supplicant.
• seconds — Time in seconds that the switch remains in the quiet state
following a failed authentication exchange with the client. (Range: 0–
65535 seconds)
Default Configuration
Each timer has a default as follows:
• quiet-period: 60 seconds
• tx-period: 30 seconds