BigIron RX Series Configuration Guide 979
53-1002253-01
Configuring 802.1x port security
33
For example, to re-authenticate Clients connected to interface 3/1, enter the following command.
BigIron RX# dot1x re-authenticate e 3/1
Syntax: [no] dot1x re-authenticate <portnum>
Setting the quiet period
If the BigIron RX is unable to authenticate the Client, the BigIron RX waits a specified amount of
time before trying again. The amount of time the BigIron RX waits is specified with the quiet-period
parameter. This timer also indicates how long a client that failed authentication would have its
blocked entry programmed into the hardware.The quiet-period parameter can be from 0 –
4294967295 seconds. The default is 60 seconds.
For example, to set the quiet period to 30 seconds, enter the following command.
BigIron RX(config-dot1x)# timeout quiet-period 30
Syntax: [no] timeout quiet-period <seconds>
Setting the interval for retransmission of EAP-request/
identity frames
When the BigIron RX sends a Client an EAP-request/identity frame, it expects to receive an
EAP-response/identity frame from the Client. If the Client does not send back an
EAP-response/identity frame, the device waits a specified amount of time and then retransmits the
EAP-request/identity frame. You can specify the amount of time the BigIron RX waits before
retransmitting the EAP-request/identity frame to the Client. This amount of time is specified with
the tx-period parameter. The tx-period parameter can be from 1 – 65535 seconds. The default is
30 seconds.
For example, to cause the BigIron RX to wait 60 seconds before retransmitting an
EAP-request/identity frame to a Client, enter the following command.
BigIron RX(config-dot1x)# timeout tx-period 60
Syntax: [no] timeout tx-period <seconds>
If the Client does not send back an EAP-response/identity frame within 60 seconds, the device will
transmit another EAP-request/identity frame.
Specifying the number of EAP-request/identity frame retransmissions
If the BigIron RX does not receive a EAP-response/identity frame from a Client, the device waits 30
seconds (or the amount of time specified with the timeout tx-period command), then retransmits
the EAP-request/identity frame. By default, the BigIron RX retransmits the EAP-request/identity
frame a maximum of two times. If no EAP-response/identity frame is received from the Client after
two EAP-request/identity frame retransmissions, the device restarts the authentication process
with the Client.
You can optionally specify between 1 – 10 frame retransmissions. For example, to configure the
device to retransmit an EAP-request/identity frame to a Client a maximum of three times, enter the
following command.
BigIron RX(config-dot1x)# maxreq 3
To Next Page
Loading...
