Security Commands 913
Example
This example configures the format of the MAC address sent in MAC based
authentication to IETF lower case for the RADIUS server at address 1.2.3.4.
MAB must be configured on the switch in an active authentication list, IEEE
802.1X must be configured, and a RADIUS server must also be configured.
console(config)#radius-server host 1.2.3.4
console(config-auth-radius)# attribute 31 mac format ietf lower-case
authentication event fail retry
Use the authentication event fail retry command to select the number of
times authentication is reattempted by the user for an IEEE 802.1X
supplicant. Use the no form of the command to return the number of
maximum attempts to the default value.
Syntax
authentication event fail retry max-attempts
no authentication event fail retry
• max-attempts — The number of times RADIUS authentication is allowed
to fail before failing the authentication and moving to the next
authentication method. Default 1. Range 1–5.
Default Configuration
By default, the number of failed authentication attempts is 1. An
authentication failure is declared failed after a single authentication attempt
and the next authentication method is attempted.
Command Mode
Interface Configuration mode, Interface Range mode
User Guidelines
The authentication manager must be enabled for this command to have
effect.
This command is only applicable to IEEE 802.1X authentication with a
RADIUS server. It has no effect on any other authentication method.