Security

Hello , I have query regarding reauthentication timer while configuring dot1x and mab . By default if we don't define reauth timer in coom , it takes default value on switch??

My second question is can we make reauthentication timer optional for mab device for example printer ,camera so that they never reauthenticate?

Also what exactly happens during reauth ? Does port go down and come up again ? Means will reauth cause session termination ??

Hello , anyone please help

 

regarding reauth timer i am elaborating me query here again -

is it optional to use reauth timer ?and if configured,radius auth timer take preference.? Can we make it infinite as long as endpoint is connected to switch?

What exactly happens in reauth for dot1x and mab?

Does port go down and comes up in both cases?

I beileve it goes down in case of dot1x but not in mab because there is no sense to relearn the Mac address if cppm already has it. Kindly suggest ?

On the reauth, it happens in the background. The port only bounces when you send a port bounce. If its a PEAP auth where credentials are sent then that is also dependant on the client OS. most will cache creds, but if it is not then the client must enter username and password on reauth timer.

As for the timer it is switch dependant, Model/IOS/AOS versions etc. You need to look at the switch options. CPPM only sends what you tell it to.

Ok thanks

My question is with setting a timer so a user only has to Authenticate once a day. Right now everytime a user gets disconnected from the network due to moving around and or shutting down thier device they have to reauthenticate everytime.

This thread was opened with wired 802.1x and MAB which does not involve roaming.  It is also a year old.  Please open a separate new thread with your specific issue.