The dot1x timer reauthenticate-period command sets the re-authentication interval for 802.1X authentication users.
The undo dot1x timer reauthenticate-period command restores the default re-authentication interval.
By default, the re-authentication interval is 3600 seconds.
dot1x timer reauthenticate-period reauthenticate-period-value
undo dot1x timer reauthenticate-period
Parameter |
Description |
Value |
---|---|---|
reauthenticate-period-value |
Specifies the re-authentication interval for 802.1X address authentication users. To reduce the impact on the device performance when many users exist, the user re-authentication interval may be longer than the configured re-authentication interval. |
The value is an integer that ranges from 1 to 65535, in seconds. |
System view, Ethernet interface view, GE interface view, MultiGE interface view, XGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, Port group view
After enabling the re-authentication function for online 802.1X authentication users using the dot1x reauthenticate command, run the dot1x timer reauthenticate-period command to set the re-authentication interval. The device then authenticates online users at the specified interval, ensuring that only authorized users can keep online.
If the command is executed in the system view, the function takes effect on all interfaces. If the command is executed in both system view and interface view, the function takes effect on the interface.
It is recommended that the re-authentication interval be set to the default value. If multiple ACLs need to be delivered during user authorization, you are advised to disable the re-authentication function or set a longer re-authentication interval to improve the device's processing performance.
In remote authentication and authorization, if the re-authentication interval is set to a shorter time, the CPU usage may be higher.
To reduce the impact on the device performance when many users exist, the user re-authentication interval may be longer than the configured re-authentication interval.