Cisco Catalyst 2960 Series, Configuration Manual

Page: 1450 / 2288

Configuring Periodic Re-Authentication
You can enable periodic 802.1x client re-authentication and specify how often it occurs. If you do not specify
a time period before enabling re-authentication, the number of seconds between attempts is 3600.
Beginning in privileged EXEC mode, follow these steps to enable periodic re-authentication of the client and
to configure the number of seconds between re-authentication attempts. This procedure is optional.
SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3. authentication periodic
4.
authentication timer {{[ inactivity | reauthenticate | restart ]} { value }}
5. end
DETAILED STEPS
Purpose Command or Action
Enters the global configuration mode.
configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the port to be configured, and enter interface configuration
mode. interface interface-id
Example:
Switch(config)# interface
Step 2
gigabitethernet2/0/1
Enables periodic re-authentication of the client, which is disabled by
default. authentication periodic
Example:
Switch(config-if)#
authentication
Step 3
The default value is 3600 seconds. To change the value of the
reauthentication timer or to have the switch use a
RADIUS-provided session timeout, enter the
authentication
timer reauthenticate command.
Note
periodic
Sets the number of seconds between re-authentication attempts.
authentication timer
{{[
inactivity
|
reauthenticate | restart ]} { value }}
Step 4
The authentication timer keywords have these meanings:
Example:
Switch(config-if)#
authentication
• inactivity — Interval in seconds after which if there is no activity
from the client then it is unauthorized
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1368
How to Configure 802.1x Port-Based Authentication