145
Use undo mac-authentication re-authenticate server-unreachable to restore the default.
Syntax
mac-authentication re-authenticate server-unreachable keep-online
undo mac-authentication re-authenticate server-unreachable
Default
The keep-online feature is disabled. The device logs off online MAC authentication users if no server is
reachable for MAC reauthentication.
Views
Ethernet interface view
Predefined user roles
network-admin
Usage guidelines
This command takes effect only after the server assigns the Radius-request action attribute to the
authenticated MAC authentication user (see "display mac-authentication connection")
. The access
device will reauthenticate the user when the session timeout timer expires.
If no server is reachable for MAC reauthentication, the device logs off the user or keeps it online,
depending on the mac-authentication re-authenticate server-unreachable keep-online command
setting on the device.
Examples
# Enable the keep-online feature for authenticated MAC authentication users on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] mac-authentication re-authenticate server-unreachable
keep-online
Related commands
display mac-authentication
mac-authentication timer
Use mac-authentication timer to set the MAC authentication timers.
Use undo mac-authentication timer to restore the defaults.
Syntax
mac-authentication timer { offline-detect offline-detect-value | quiet quiet-value | server-timeout
server-timeout-value }
undo mac-authentication timer { offline-detect | quiet | server-timeout }
Default
The offline detect timer is 300 seconds, the quiet timer is 60 seconds, and the server timeout timer is 100
seconds.
Views
System view
To Next Page
Loading...
Need help?
General
