The authentication timer re-authen command configures the interval for re-authenticating pre-connection users or users who fail to be authenticated.
The undo authentication timer re-authen command restores the default setting.
By default, pre-connection users and users who fail to be authenticated are re-authenticated at an interval of 60 seconds.
authentication timer re-authen { pre-authen re-authen-time | authen-fail re-authen-time }
undo authentication timer re-authen { pre-authen | authen-fail }
Parameter | Description | Value |
---|---|---|
pre-authen re-authen-time | Specifies the interval for re-authenticating pre-connection users. |
The value is an integer that ranges from 0 or 30 to 7200, in seconds. The value 0 indicates that the re-authentication function is disabled for pre-connection users. |
authen-fail re-authen-time | Specifies the interval for re-authenticating users who fail to be authenticated. |
The value is an integer that ranges from 30 to 7200, in seconds. |
Usage Scenario
The device creates the mapping user entries when network access policies are assigned to users who are in the pre-connection phase or fail authentication. To enable users to pass authentication in real time, the device periodically re-authenticates the users who are in the pre-connection phase or fail authentication according to the user entries. The administrator can adjust the re-authentication interval based on the actual network requirements.
Precautions
This command only applies to 802.1X authentication and MAC address authentication.
This function takes effect only for users who go online after this function is successfully configured.
To reduce the impact on the device performance when many users exist, the user re-authentication interval may be longer than the configured re-authentication interval.