Specifications

2-130
Cisco IOS Command Reference for Cisco Aironet Access Points and Bridges
0L-24115-01
Chapter 2 Cisco IOS Commands for Access Points and Bridges
eapfast pac expiry
eapfast pac expiry
Use the eapfast pac expiry global configuration command to set the Protected Access Credential (PAC)
expiration time and grace period for a group of EAP-FAST clients associated to a local authenticator
access point.
[no] eapfast pac expiry days [grace days]
Syntax Description
Defaults The default is infinite days for both the expiration time and the grace period.
Command Modes Client group configuration mode for local authenticators
Command History
Examples In this example, PACs for the user group clerks expire in 10 days with a grace period of two days:
AP(config)#radius-server local
AP(config-radsrv)#group clerks
AP(config-radsrv-group)#eapfast pac expiry 10 grace 2
Related Commands
days Specifies the number of days that the PAC is valid for a group of
EAP-FAST clients. Enter a number of days from 1 to 4095.
grace days Specifies the grace period after the PAC expires. The PAC remains
valid until the end of the grace period. Enter a number of days from 1
to 4095.
Release Modification
12.3(2)JA This command was introduced.
Command Description
radius local-server pac-generate Generates a PAC file for an EAP-FAST client