Alcatel-Lucent AOS-W 6.5.3.x - Page 264

264| 802.1X Authentication AOS-W 6.5.3.x| User Guide
Parameter Description
Machine Authentication
Cache Timeout
The timeout, in hours, for machine authentication. The allowed range of values is
1-1000 hours, and the default value is 24 hours.
Blacklist on Machine
Authentication Failure
Select the Blacklist on Machine Authentication Failure checkbox to blacklist a
client if machine authentication fails. This setting is disabled by default.
Interval between
Identity Requests
Interval, in seconds, between identity request retries.
Range: 1-65535 seconds.
Default: 30 seconds.
Quiet Period after
Failed Authentication
The enforced quiet period interval, in seconds, following failed authentication.
Range: 1-65535 seconds.
Default: 30 seconds.
Reauthentication
Interval
Interval, in seconds, between reauthentication attempts.
Range: 60-864000 seconds.
Default: 86400 seconds (1 day).
Use Server provided
Reauthentication
Interval
Select this option to override any user-defined reauthentication interval and use
the reauthentication period defined by the authentication server.
Multicast Key Rotation
Time Interval
Interval, in seconds, between multicast key rotation.
Range: 60-864000 seconds.
Default: 1800 seconds.
Unicast Key Rotation
Time Interval
Interval, in seconds, between unicast key rotation.
Range: 60-864000 seconds. Default: 900 seconds.
Authentication Server
Retry Interval
Server group retry interval, in seconds.
Range: 5-65535 seconds.
Default: 30 seconds.
Authentication Server
Retry Count
Maximum number of authentication requests that are sent to server group.
Range: 0-3 requests.
Default: 2 requests.
Framed MTU Sets the framed Maximum Transmission Unit (MTU) attribute sent to the
authentication server.
Range: 500-1500 bytes.
Default: 1100 bytes.
Number of times ID-
Requests are retried
Maximum number of times ID requests are sent to the client.
Range: 1-10 retries.
Default: 3 retries.
Maximum Number of
Reauthentication
Attempts
Number of times a user can try to log in with wrong credentials after which the
user is blacklisted as a security threat. Set to 0 to disable blacklisting, otherwise
enter a value from 0-5 to blacklist the user after the specified number of failures.
NOTE: If changed from its default value, this option may require a license.
Table 72: 802.1X Authentication Profile Basic WebUI Parameters