Enabling Periodic Reauthentication for an Interface
You can enable periodic 802.1X reauthentication on an interface and specify how often it occurs. If you do
not specify a time period before enabling reauthentication, the number of seconds between reauthentication
defaults to the global value.
During the reauthentication process, the status of an already authenticated supplicant is not disrupted.
Note
Before you begin
Enable the 802.1X feature on the Cisco NX-OS device.
SUMMARY STEPS
1.
configure terminal
2.
interface ethernet slot/port
3.
dot1x re-authentication
4.
(Optional)
dot1x timeout re-authperiod seconds
5.
exit
6.
(Optional)
show dot1x all
7.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Selects the interface to configure and enters interface
configuration mode.
interface ethernet slot/port
Example:
Step 2
switch(config)# interface ethernet 2/1
switch(config-if)#
Enables periodic reauthentication of the supplicants
connected to the interface. By default, periodic
authentication is disabled.
dot1x re-authentication
Example:
switch(config-if)# dot1x re-authentication
Step 3
Sets the number of seconds between reauthentication
attempts. The default is 3600 seconds. The range is from 1
to 65535.
(Optional)
dot1x timeout re-authperiod seconds
Example:
switch(config-if)# dot1x timeout re-authperiod 3300
Step 4
This command affects the behavior of the Cisco
NX-OS device only if you enable periodic
reauthentication on the interface.
Note
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
191
Configuring 802.1X
Enabling Periodic Reauthentication for an Interface