cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
478
Views
0
Helpful
0
Replies

Dot1x misconfigured supplican timeout

gabrieleferrari
Level 1
Level 1

Hi Guys,

 

I've to solve an interesting problem. In an 802.1x environment if the supplicant is configured correctly, all is supposed to work as expected without any issue.

 

But what happens if an employee from company A with a supplicant configured with his company parameters (including the automatic use of credentials used for login) try to connect to an 802.1x ready network in comany B? Of course the authentication fails but he might still reach the condition of wired Guest.

Unfortunately with default timeout parameters it takes more or less 8 minutes to reach the Auth Failover status.

I've tried several combinations of timeout parameters, following an example of the custom timeout parameter:

 

int g1/0/1

authentication timer restart 10
 dot1x timeout quiet-period 10
 dot1x timeout server-timeout 10
 dot1x timeout tx-period 10
 dot1x timeout supp-timeout 10
 dot1x timeout ratelimit-period 10
 dot1x max-reauth-req 1
 dot1x timeout start-period 10
 dot1x timeout held-period 10
 dot1x timeout auth-period 10

 

but the time took for authentication is still more than 5 minutes

 

Does anyone has some suggestion?

Thanks

Regards

Gabriele

0 Replies 0