802.1X | 79
View 802.1X configuration information for an interface using the command show dot1x interface, as
shown in Figure 5-6.
Figure 5-6. Verifying 802.1X Interface Configuration
Configuring Request Identity Re-transmissions
If the authenticator sends a Request Identity frame, but the supplicant does not respond, the authenticator
waits 30 seconds and then re-transmits the frame. The amount of time that the authenticator waits before
re-transmitting and the maximum number of times that the authenticator re-transmits are configurable.
To configure the amount of time that the authenticator waits before re-transmitting an EAP Request
Identity frame:
Note: There are several reasons why the supplicant might fail to respond; the supplicant might have been
booting when the request arrived, or there might be a physical layer problem.
Step Task Command Syntax Command Mode
1 Configure the amount of time that the authenticator
waits before re-transmitting an EAP Request Identity
frame.
dot1x tx-period number
Range: 1-31536000 (1 year)
Default: 30
INTERFACE
FTOS#show dot1x interface gigabitethernet 2/1
802.1x information on Gi 2/1:
-----------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 2
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
802.1X Enabled on
All ports unauthorized by default
To Next Page
Loading...
