You should change the default values only to adjust for unusual circumstances such as unreliable links or
specific behavioral problems with certain supplicants and authentication servers.
Note
Before you begin
Enable the 802.1X feature on the Cisco NX-OS device.
SUMMARY STEPS
1.
configure terminal
2.
interface ethernet slot/port
3.
(Optional)
dot1x timeout quiet-period seconds
4.
(Optional)
dot1x timeout ratelimit-period seconds
5.
(Optional)
dot1x timeout server-timeout seconds
6.
(Optional)
dot1x timeout supp-timeout seconds
7.
(Optional)
dot1x timeout tx-period seconds
8.
(Optional)
dot1x timeout inactivity-period seconds
9.
exit
10.
(Optional)
show dot1x all
11.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Selects the interface to configure and enters interface
configuration mode.
interface ethernet slot/port
Example:
Step 2
switch(config)# interface ethernet 2/1
switch(config-if)
Sets the number of seconds that the authenticator waits for
a response to an EAP-request/identity frame from the
(Optional)
dot1x timeout quiet-period seconds
Example:
Step 3
supplicant before retransmitting the request. The default
switch(config-if)# dot1x timeout quiet-period 25
is the global number of seconds set for all interfaces. The
range is from 1 to 65535 seconds.
Sets the number of seconds that the authenticator ignores
EAPOL-Start packets from supplicants that have
(Optional)
dot1x timeout ratelimit-period seconds
Example:
Step 4
successfully authenticated. The default value is 0 seconds.
The range is from 1 to 65535 seconds.
switch(config-if)# dot1x timeout ratelimit-period
10
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
194
Configuring 802.1X
Changing 802.1X Authentication Timers for an Interface
