White Papers

dot1x reauth-max
Configure the maximum number of times a port can reauthenticate before the port becomes unauthorized.
Syntax
dot1x reauth-max number
To return to the default, use the no dot1x reauth-max command.
Parameters
number Enter the permitted number of reauthentications. The range is from 1 to 10. The
default is 2.
Defaults 2
Command Modes INTERFACE
Supported Modes Full–Switch
Command
History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
dot1x server-timeout
Configure the amount of time after which exchanges with the server time-out.
Syntax
dot1x server-timeout seconds
To return to the default, use the no dot1x server-timeout command.
Parameters
seconds Enter a time-out value in seconds. The range is from 1 to 300, where 300 is
implementation dependant. The default is 30.
Defaults 30 seconds
Command Modes INTERFACE
Supported Modes Full–Switch
Command
History
Version Description
9.9(0.0) Introduced on the FN IOM.
9.2(0.0) Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
When you configure the dot1x server-timeout value, take into account the communication medium
used to communicate with an authentication server and the number of RADIUS servers configured.
Ideally, the dot1x server-timeout value (in seconds) is based on the configured RADIUS-server
timeout and retransmit values and calculated according to the following formula: dot1x server-
timeout seconds > (radius-server retransmit seconds + 1) * radius-server timeout seconds.
Where the default values are as follows: dot1x server-timeout (30 seconds), radius-server
retransmit (3 seconds), and radius-server timeout (5 seconds).
For example:
Dell(conf)#radius-server host 10.11.197.105 timeout 6
Dell(conf)#radius-server host 10.11.197.105 retransmit 4
Dell(conf)#interface tengigabitethernet 2/1
Dell(conf-if-te-2/1)#dot1x server-timeout 40
134 802.1X