The mac-authen reauthenticate command enables re-authentication for online MAC address authentication users.
The undo mac-authen reauthenticate command restores the default configuration.
By default, re-authentication for online MAC address authentication users is disabled.
Usage Scenario
After the administrator modifies the authentication parameters of an online user on the authentication server, the user must be re-authenticated to ensure user validity.
After the user goes online, the device saves authentication parameters of the user. After re-authentication is configured for online MAC address authentication users, the device automatically sends the user authentication parameters in the MAC access profile to the authentication server at an interval (specified using the mac-authen timer reauthenticate-period command) for re-authentication. If the user authentication information on the authentication server remains unchanged, the users are kept online. If the information has been changed, the users are disconnected and need to be re-authenticated based on the changed authentication parameters.
Precautions
After periodic re-authentication is configured for online MAC address authentication users, a large number of MAC address authentication logs are generated.
This function takes effect only for users who go online after this function is successfully configured.
MAC address authentication users who go online through a VLANIF interface do not support re-authentication.
If the device is connected to a server for re-authentication and the server replies with a re-authentication deny message that makes an online user go offline, it is recommended that you locate the cause of the re-authentication failure on the server or disable the re-authentication function on the device.