Users Guide

Security Commands 1084
During the quiet period, the switch does not accept or initiate any
authentication requests.
To provide a faster response time to the 802.1X clients, enter a smaller
number than the default.
Supp-timeout:
The default timeout value is set per IEEE 802.1x. This value is used in
conjunction with the dot1x timeout server-timeout command to limit the
amount of time a supplicant can remain in a pending authentication state.
Server-timeout:
The actual timeout value used by the switch is this parameter or the product
of the RADIUS transmission times the RADIUS timeout, whichever is
smaller.
Command History
Syntax updated in version 6.6 firmware.
Example
The following command sets the number of seconds that the switch waits for
a response to an EAP-request/identity frame to 60 seconds. A side effect of
this setting is that a MAB device might take several minutes to be
authenticated.
console(config)# interface gigabitethernet 1/0/16
console(config-if-Gi1/0/16)# dot1x timeout tx-period 60
The following example sets the time for the retransmission to the
authentication server to 90 seconds. A side effect of this setting is that an
authentication over an unreliable link to the authentication server might take
as long as six or seven minutes.
console(config-if-gi1/0/1)# dot1x timeout server-timeout 90
authentication timer reauthenticate
Use the authentication timer reauthenticate command in Interface
Configuration mode to set the number of seconds between reauthentication
attempts. To return to the default setting, use the no form of this command.