Cisco WS-C2948G-GE-TX - Setting the Supplicant-To-Host Retransmission Time for EAP-Request Frames; Layer Packets

31-15
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
Chapter 31 Configuring 802.1x Authentication
Configuring 802.1x Authentication on the Switch
This example shows how to set the authenticator-to-host retransmission time for the
EAP-request/identity frame to 15 seconds:
Console> (enable) set dot1x tx-period 15
dot1x tx-period set to 15 seconds.
Setting the Supplicant-to-Host Retransmission Time for EAP-Request Frames
The host notifies the back-end authenticator that it received the EAP-request frame. When the back-end
authenticator does not receive this notification, the back-end authenticator waits a set period of time, and
then retransmits the frame. You may set the amount of time that the back-end authenticator waits for
notification from 1–65,535 seconds. The default is 30 seconds.
To set the back-end authenticator-to-host retransmission time for the EAP-request frames, perform this
task in privileged mode:
This example shows how to set the back-end authenticator-to-host retransmission time for the
EAP-request frame to 15 seconds:
Console> (enable) set dot1x supp-timeout 15
dot1x supp-timeout set to 15 seconds.
Setting the Back-End Authenticator-to-Authentication-Server Retransmission
Time for Transport Layer Packets
The authentication server notifies the back-end authenticator each time that it receives a transport layer
packet. When the back-end authenticator does not receive a notification after sending a packet, the
back-end authenticator waits a set period of time, and then retransmits the packet. You may set the
amount of time that the back-end authenticator waits for notification from 1–65,535 seconds. The default
is 30 seconds.
To set the value for the retransmission of transport layer packets from the back-end authenticator to the
authentication server, perform this task in privileged mode:
This example shows how to set the value for the retransmission time for transport layer packets that are
sent from the back-end authenticator to the authentication server to 15 seconds:
Console> (enable) set dot1x server-timeout 15
dot1x server-timeout set to 15 seconds.
Task Command
Set the back-end authenticator-to-host
retransmission time for an EAP-request frame.
set dot1x supp-timeout seconds
Task Command
Set the back-end authenticator-to-authentication-server
retransmission time for transport layer packets.
set dot1x server-timeout seconds