< Home

mac-authen timer reauthenticate-period

Function

The mac-authen timer reauthenticate-period command configures the re-authentication interval for online MAC address authentication users.

The undo mac-authen timer reauthenticate-period command restores the default setting.

By default, the re-authentication period is 1800 seconds for online MAC address authentication users.

Format

mac-authen timer reauthenticate-period reauthenticate-period-value

undo mac-authen timer reauthenticate-period

Parameters

Parameter

Description

Value

reauthenticate-period-value

Specifies the interval for re-authenticating online MAC address authentication users.

The value is an integer that ranges from 1 to 65535, in seconds.

Views

MAC access profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After configuring the re-authentication function for online MAC address authentication users using the mac-authen reauthenticate command, run the mac-authen timer reauthenticate-period command to configure the re-authentication interval. The device then re-authenticates online users at the specified interval, ensuring that only authorized users can keep online.

Precautions

Generally, the default re-authentication interval is recommended. If many ACL rules need to be delivered during user authorization, to improve the device processing performance, you are advised to disable re-authentication or increase the re-authentication internal. When remote authentication and authorization are used and a short re-authentication interval is used, the CPU usage may become high.

MAC address authentication users who go online through a VLANIF interface do not support re-authentication.

To reduce the impact on the device performance when many users exist, the user re-authentication interval may be longer than the configured re-authentication interval.

Example

# In the MAC access profile mac_access_profile, configure the re-authentication interval for online MAC address authentication users to 2000 seconds.

<HUAWEI> system-view
[HUAWEI] mac-access-profile name mac_access_profile
[HUAWEI-mac-access-profile-mac_access_profile] mac-authen timer reauthenticate-period 2000
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >