Concept Guide

Parameter Description Range Default
keycache-tmout
Set the per BSSID PMKSA
cache interval. Cache is
deleted within 2 hours of the
interval.
1-2000
(hours)
8 hours
mkey-rotation-period <seconds>
Interval, in seconds, between
multicast key rotation.
60-
864000
1800
seconds
quiet-period <seconds>
Interval, in seconds, following
failed authentication.
1-65535 30
seconds
reauth-period <seconds>
Interval, in seconds, between
reauthentication attempts, or
specify server to use the
server-provided
reauthentication period.
60-
864000
86400
seconds
(1 day)
ukey-rotation-period <seconds>
Interval, in seconds, between
unicast key rotation.
60-
864000
900
seconds
wpa-groupkey
-delay <milliseconds>
Interval, in milliseconds,
between unicast and
multicast key exchanges.
0-2000 0 ms
(no
delay)
wpa-key-period <milliseconds>
Interval, in milliseconds,
between each WPA key
exchange.
1000-
5000
1000 ms
wpa2-key-delay <milliseconds>
Set the delay between EAP-
Success and unicast key
exchange.
1-2000 0 ms
(no
delay)
tls-guest-access
Enables guest access for EAP-
TLS users with valid
certificates.
— disabled
tls-guest-role <role>
User role assigned to EAP-TLS
guest.
NOTE: This parameter
requires the PEFNG license.
— guest
unicast-keyrotation
Enables unicast key rotation. — disabled
use-session-key
Use RADIUS session key as
the unicast WEP key.
— disabled
use-static-key
Use static key as the
unicast/multicast WEP key.
— disabled
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa authentication dot1x | 31