Cisco Catalyst 2950 Command Reference Manual page 137

Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
Usage Guidelines You should change the default values only to adjust for unusual circumstances such as unreliable links
or specific behavioral problems with certain clients and authentication servers.
The dot1x timeout reauth-period interface configuration command affects the behavior of the switch
only if you have enabled periodic re-authentication by using the dot1x reauthentication interface
configuration command.
During the quiet period, the switch does not accept or initiate any authentication requests. If you want
to provide a faster response time to the user, enter a number smaller than the default.
Examples This example shows how to enable periodic re-authentication and to set the number of seconds between
re-authentication attempts to 4000 seconds:
Switch(config-if)# dot1x reauthentication
Switch(config-if)# dot1x timeout reauth-period 4000
This example shows how to enable periodic re-authentication and to specify the value of the
Session-Timeout RADIUS attribute as the number of seconds between re-authentication attempts:
Switch(config-if)# dot1x reauthentication
Switch(config-if)# dot1x timeout reauth-period server
This example shows how to set the quiet time on the switch to 30 seconds:
Switch(config-if)# dot1x timeout quiet-period 30
This example shows how to set 60 as the number of seconds to wait for a response to an
EAP-request/identity frame from the client before re-transmitting the request:
Switch(config-if)# dot1x timeout tx-period 60
This example shows how to set the switch-to-client retransmission time for the EAP request frame to 25
seconds:
Switch(config-if)# dot1x timeout supp-timeout 25
This example shows how to set the switch-to-authentication server retransmission time to 25 seconds:
Switch(config)# dot1x timeout server-timeout 25
This example shows how to return to the default re-authorization period:
Switch(config-if)# no dot1x timeout reauth-period
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command
dot1x max-req
dot1x reauthentication
show dot1x
interface-id]
OL-10102-01
Description
Sets the maximum number of times that the switch sends an
EAP-request/identity frame before restarting the authentication process.
Enables periodic re-authentication of the client.
[interface Displays IEEE 802.1x status for the specified interface.
Catalyst 2950 and Catalyst 2955 Switch Command Reference
dot1x timeout
2-107