Users Guide

Security Commands 1119
User Guidelines
The re-authentication process sends an authentication message (EAP-
Request/Identity)to authenticated supplicants asking them to re-
authenticate themselves. If a supplicant fails re-authentication, it is denied
access to switch resources. Re-authentication must be enabled for this setting
to have any effect.
Command History
Syntax updated in version 6.6 firmware.
Example
The following example sets the number of seconds between re-authentication
attempts to 300.
console(config)# interface gigabitethernet 1/0/16
console(config-if-Gi1/0/16)# authentication timer reauthenticate 300
The following example enables periodic reauthentication of the client every
two hours.
console(config)# interface gigabitethernet 1/0/16
console(config-if-Gi1/0/16)# authentication periodic
console(config-if-Gi1/0/16)# authentication timer reauthenticate 7200
auth-type
Use this command to set the accepted authorization types for RADIUS CoA
clients. Use the no form of the command to set the authorization type to the
default (all).
Syntax
auth-type { all | any |session-key}
no auth-type
• all—Selects all CoA client authentication types. All session identification
attributes must match for the authentication to succeed.
• any—Selects any CoA client authentication type. Any session
identification attribute may match for the authentication to succeed.
• session-key—Indicates that the session-key (Acct-Session-ID) must match
for authentication to succeed.