Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario descargar pdf (Pagina 330)

312 Multi-Service IronWare Security Configuration Guide

53-1003035-02

Configuring 802.1x port security

The re-authentication interval is a global setting, applicable to all 802.1x-enabled interfaces. If you

want to re-authenticate clients connected to a specific port manually, use the dot1x re-authenticate

command. Refer to “Re-authenticating a port manually”.

Re-authenticating a port manually

When periodic re-authentication is enabled, by default the device re-authenticates clients

connected to an 802.1x-enabled interface every 3,600 seconds (or the time specified by the dot1x

timeout re-authperiod command). You can also manually re-authenticate clients connected to a

specific port.

For example, to re-authenticate clients connected to interface 3/1, enter the following command.

Brocade# dot1x re-authenticate e 3/1

Syntax: [no] dot1x re-authenticate portnum

Setting the quiet period

If the device is unable to authenticate the client, the device waits a specified amount of time before

trying again. The amount of time the device waits is specified with the quiet-period parameter. This

timer also indicates how long a client that failed authentication would have its blocked entry

programmed into the hardware.The quiet-period parameter can be from 0 – 4294967295

seconds. The default is 60 seconds.

For example, to set the quiet period to 30 seconds, enter the following command.

Brocade(config-dot1x)# timeout quiet-period 30

Syntax: [no] timeout quiet-period seconds

Setting the interval for retransmission of

EAP-request or identity frames

When the device sends a client an EAP-request or identity frame, it expects to receive an

EAP-response or identity frame from the client. If the client does not send back an EAP-response or

identity frame, the device waits a specified amount of time and then retransmits the EAP-request

or identity frame. You can specify the amount of time the device waits before retransmitting the

EAP-request or identity frame to the client. This amount of time is specified with the tx-period

parameter. The tx-period parameter can be from 1 – 65535 seconds. The default is 30 seconds.

For example, to cause the device to wait 60 seconds before retransmitting an EAP-request or

identity frame to a client, enter the following command.

Brocade(config-dot1x)# timeout tx-period 60

Syntax: [no] timeout tx-period seconds

If the client does not send back an EAP-response or identity frame within 60 seconds, the device

will transmit another EAP-request or identity frame.

1 2 ... 325 326 327 328 329 330 331 332 333 334 335 ... 369 370

Sin comentarios

Brocade Multi-Service IronWare Security Configuration Guid Manual de usuario Pagina 330