Cisco FirePOWER ASA 5500 series Configuration Manual page 662

Changing Advanced Settings
Retransmission retries
•
When the security appliance sends an EAP over UDP message to the remote host, it waits for a
response. If it fails to receive a response, it resends the EAP over UDP message. By default, it retries
up to 3 times. To change this value, enter the following command in global configuration mode:
eou max-retry retries
retries is a value in the range 1 to 3.
The following example limits the number of EAP over UDP retransmissions to 1:
hostname(config)# eou max-retry 1
hostname(config)#
To change the maximum number of retransmission retries to its default value, use the no form of
this command, as follows:
no eou max-retry
For example:
hostname(config)# no eou max-retry
hostname(config)#
Session reinitialization timer
•
When the retransmission retry counter matches the max-retry value, the security appliance
terminates the EAP over UDP session with the remote host and starts the hold timer. When the hold
timer equals n seconds, the security appliance establishes a new EAP over UDP session with the
remote host. By default, the maximum number of seconds to wait before establishing a new session
is 180 seconds. To change this value, enter the following command in global configuration mode:
eou timeout hold-period seconds
seconds is a value in the range 60 to 86400.
For example, enter the following command to change the wait period before initiating a new EAP
over UDP association to 120 seconds:
hostname(config)# eou timeout hold-period 120
hostname(config)#
To change the session reinitialization to its default value, use the no form of this command, as
follows:
no eou timeout hold-period
For example:
hostname(config)# no eou timeout hold-period
hostname(config)#
Cisco Security Appliance Command Line Configuration Guide
33-8
Chapter 33 Configuring Network Admission Control
OL-10088-01