196
Default
A maximum of two attempts are made to send an authentication request to a client.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
retries
: Specifies the maximum number of attempts for sending an authentication request to a client.
The value range is 1 to 10.
Usage guidelines
The access device retransmits an authentication request to a client in any of the following situations:
•
The device does not receive any responses from the client within the username request timeout
timer. The timer is set by using the
dot1x timer tx-period tx-period-value
command for the
EAP-Request/Identity packet.
•
The device does not receive any responses from the client within the client timeout timer. The
timer is set by using the
dot1x timer supp-timeout
supp-timeout-value
command for the
EAP-Request/MD5-Challenge packet.
The access device stops retransmitting the request, if it has made the maximum number of request
transmission attempts but still received no response.
Examples
# Set the maximum number of attempts to 9 for sending an authentication request to a client.
<Sysname> system-view
[Sysname] dot1x retry 9
Related commands
display dot1x
dot1x timer
dot1x timer
Use
dot1x
timer
to set an 802.1X timer.
Use
undo dot1x
timer
to restore the default of an 802.1X timer.
Syntax
dot1x timer
{
ead-timeout
ead-timeout-value
|
handshake-period handshake-period-value
|
quiet-period
quiet-period-value
|
reauth-period
reauth-period-value
|
server-timeout
server-timeout-value
|
supp-timeout
supp-timeout-value
|
tx-period tx-period-value
}
undo dot1x timer
{
ead-timeout
|
handshake-period
|
quiet-period
|
reauth-period
|
server-timeout
|
supp-timeout
|
tx-period
}
Default
The following 802.1X timers apply:
•
EAD rule timer: 30 minutes.
•
Handshake timer: 15 seconds.
•
Quiet timer: 60 seconds.
