2-96
Catalyst 3560 Switch Command Reference
78-16405-05
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands
dot1x max-reauth-req
dot1x max-reauth-req
Use the dot1x max-reauth-req interface configuration command to set the maximum number of times
that the switch restarts the authentication process before a port changes to the unauthorized state. Use
the no form of this command to return to the default setting.
dot1x max-reauth-req count
no dot1x max-reauth-req
Syntax Description
Defaults The default is 2 times.
Command Modes Interface configuration
Command History
Usage Guidelines You should change the default value of this command only to adjust for unusual circumstances such as
unreliable links or specific behavioral problems with certain clients and authentication servers.
Examples This example shows how to set 4 as the number of times that the switch restarts the authentication
process before the port changes to the unauthorized state:
Switch(config-if)# dot1x max-reauth-req 4
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands
count Number of times that the switch restarts the authentication process before the
port changes to the unauthorized state. The range is 0 to 10.
Release Modification
12.2(18)SE This command was introduced.
12.2(25)SEC The count range was changed.
Command Description
dot1x max-req Sets the maximum number of times that the switch forwards an EAP
frame (assuming that no response is received) to the authentication server
before restarting the authentication process .
dot1x timeout tx-period Sets the number of seconds that the switch waits for a response to an
EAP-request/identity frame from the client before resending the
request.
show dot1x [interface
interface-id]
Displays IEEE 802.1x status for the specified port.