Administrator Guide

Security Commands 928
requests to the RADIUS server before the authenticator allows IEEE 802.1x
to stop supplicant authentication and to invoke the quiet period for the
supplicant.
This command sets the limit for retring failed authentications for RADIUS.
The switch attempts authentication based on the selected method and if
authentication returns an error (as opposed to a failure), the next
authentication method is attempted regardless of this setting.
For example, if one or multiple RADIUS servers are configured and no
RADIUS server responds to the authentication message, RADIUS returns an
error and the next authentication method is attempted even when the retry
parameter is configured to a value larger than 1.
Example
The following example configures the switch to allow IEEE 802.1X
supplicants to fail authentication (e.g., enter incorrect passwords) three times
before invoking the quiet timer on the interface.
console#conf
console(config)#authentication enable
console(config)#authentication order dot1x
console(config)#authentication retry 3
Command History
Introduced in version 6.3.0.1 firmware.
auth-port
Use the auth-port command in RADIUS Server Configuration mode to set
the port number on which the RADIUS server listens for authentication
requests.
Syntax
auth-port auth-port-number
• auth-port-number — Port number for authentication requests. (Range: 1 -
65535)
2CSNXXX_SWUM204.book Page 928 Monday, January 25, 2016 1:25 PM