Cisco IE 4000, Software Configuration Manual

Page: 227 / 1066

223
Configuring IEEE 802.1x Port-Based Authentication
How to Configure IEEE 802.1x Port-Based Authentication
Configuring Periodic Reauthentication
You can enable periodic 802.1x client reauthentication and specify how often it occurs. If you do not specify a time period
before enabling reauthentication, the number of seconds between attempts is 3600. Beginning in privileged EXEC mode,
follow these steps to enable periodic reauthentication of the client and to configure the number of seconds between
reauthentication attempts. This procedure is optional.
6. end Returns to privileged EXEC mode.
7. show authentication interface
interface-id
Verifies your entries.
8. copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose
Command Purpose
1. configure terminal Enters global configuration mode.
2. interface interface-id Specifies the port to be configured, and enter interface configuration
mode.
3. authentication periodic Enables periodic reauthentication of the client, which is disabled by
default.
Note: The default value is 3600 seconds. To change the value of the
reauthentication timer or to have the switch use a RADIUS-provided
session timeout, enter the
authentication timer reauthenticate
command.
4. authentication timer {{[ inactivity |
reauthenticate ]} { restart value }}
Sets the number of seconds between reauthentication attempts.

inactivity —Interval in seconds after which if there is no activity from
the client then it is unauthorized

reauthenticate —Time in seconds after which an automatic
reauthentication attempt is be initiated.

restart value —Interval in seconds after which an attempt is made to
authenticate an unauthorized port.
This command affects the behavior of the switch only if periodic
reauthentication is enabled.
5. authentication timer reauthenticate
seconds
Sets the number of seconds that the switch waits for a response to an
EAP-request/identity frame from the client before resending the request.
The range is 1 to 65535 seconds; the default is 5.
Note: You should change the default value of this command only to
adjust for unusual circumstances such as unreliable links or specific
behavioral problems with certain clients and authentication servers.
6. end Returns to privileged EXEC mode.
7. show authentication interface
interface-id
Verifies your entries.
8. copy running-config startup-config (Optional) Save your entries in the configuration file.