Connectivity Guide

Identity retransmissions
If the authenticator sends a Request Identity frame but the supplicant does not respond, the authenticator waits 30 seconds and then
retransmits the frame. There are several reasons why the supplicant might fail to respond — the supplicant maybe booting when the
request arrived, there may be a physical layer problem, and so on.
1 Congure the amount of time that the authenticator waits before retransmitting an EAP Request Identity frame in INTERFACE mode,
from 1 to 65535 – 1 year, default 60.
dot1x timeout tx-period seconds
2 Congure a maximum number of times the authenticator retransmits a Request Identity frame in INTERFACE mode from 1 to 10,
default 2.
dot1x max-req retry-count
Congure and verify retransmission time
OS10(config)# dot1x system-auth-control
OS10(config)# interface range 1/1/7-1/1/8
OS10(conf-range-eth1/1/7-1/1/8)# dot1x timeout tx-period 120
OS10(conf-range-eth1/1/7-1/1/8)# dot1x max-req 5
OS10(conf-range-eth1/1/7-1/1/8)# do show dot1x interface ethernet 1/1/7
802.1x information on ethernet1/1/7
-------------------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Enable
Tx Period: 120 seconds
Quiet Period: 60 seconds
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 5
Host Mode: MULTI_HOST
Auth PAE State: Initialize
Backend State: Idle
View interface running conguration
OS10(conf-range-eth1/1/7-1/1/8)# do show running-configuration interface
...
!
interface ethernet1/1/7
no shutdown
dot1x max-req 5
dot1x port-control auto
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout tx-period 120
!
interface ethernet1/1/8
no shutdown
dot1x max-req 5
dot1x port-control auto
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout tx-period 120
...
Layer 2
257