C
HAPTER
15
| Security Commands
Network Access Server Commands
– 359 –
security network
nas reauthentication
This command sets clients to be re-authenticated after an interval specified
by the re-authentication period.
SYNTAX
security network nas reauthentication [enable | disable]
enable - Enables client re-authentication after the specified re-
authentication period.
disable - Disables client re-authentication.
DEFAULT SETTING
Disabled
COMMAND USAGE
◆ Re-authentication can be used to detect if a new device is plugged into
a switch port.
◆ For MAC-based ports, re-authentication is only useful if the RADIUS
server configuration has changed. It does not involve communication
between the switch and the client, and therefore does not imply that a
client is still present on a port (see the security network nas agetime
command).
◆ This command is only effective when 802.1X is globally enabled (using
the security network nas mode command) and the port's authentication
mode is set to “auto” or “macbased” (using the security network nas
state command).
EXAMPLE
Security/Network/NAS>reauthentication enable
Security/Network/NAS>
security network
nas reauthperiod
This command sets the time after which a connected client must be re-
authenticated.
SYNTAX
security network nas reauthperiod [reauth-period]
reauth-period - The time period after which a connected client must
be re-authenticated. (Range: 1-3600 seconds)
DEFAULT SETTING
3600 seconds
EXAMPLE
Security/Network/NAS>reauthperiod 1000
Security/Network/NAS>