Quiet Timer for MAC Address Authentication
This section discusses the timer that controls when MAC address authentication restarts after the number of failed MAC address authentication attempts within 60 seconds reaches the value specified by the mac-authen quiet-timers fail-times command.
If a user fails MAC address authentication, the access device waits for a period of time specified by the mac-authen timer quite-period quiet value command. During this period, the access device discards the MAC address authentication requests sent from the user. The quiet timer effectively prevents system resource wastes and brute force attacks on the user name and password. Figure 1 shows the operation of the quiet timer for MAC address authentication.
The quiet timer for MAC
address authentication does not take effect in the following scenarios:
- The pre-connection function has been enabled using the authentication pre-authen-access enable command.
- Network access rights have been configured for users in abnormal authentication state using the authentication event action authorize command.
- Multi-mode authentication containing MAC address authentication is used.