Wired Intelligent Edge

 View Only
  • 1.  2930F AAA mac-based reauth-period

    Posted Mar 17, 2020 08:04 AM

    Can I have a different reauth-period for unauthenticated clients to authenticated clients?



  • 2.  RE: 2930F AAA mac-based reauth-period

    Posted Mar 17, 2020 10:48 AM

    i think, you can also push the reauthentification period via RADIUS attribut (it will be more easy)



  • 3.  RE: 2930F AAA mac-based reauth-period

    Posted Mar 20, 2020 09:26 AM

    Good Friday!

     

    Hello,

    Unauthenticated clients means reject clients correct?

     

    • For Authenticated clients - you can assigned re-auth from radius via attribute.
    • For unauthenticated clients (rejected clients) - you can configure re-auth in initial role in case of AOS-Switch (2930F) or reject-role incase of AOS-CX switch.

    Thank you,

    Yash



  • 4.  RE: 2930F AAA mac-based reauth-period

    Posted Mar 23, 2020 11:45 AM

    For unauthenticated clients there is no real re-auth period.

     

    What you might want is to set a timer between retries, this will prevent overflooding the radius servers, but this will retry to authenticatie once every X period.

     

    aaa port-access mac-based <port> quiet-period 30