SMC Networks ElliteConnect 2.4GHz/5GHz - Manual (Page 223)

Authentication
7-53
Command Usage
• The access point uses EAPOL (Extensible Authentication
Protocol Over LANs) packets to pass dynamic unicast
session and broadcast keys to wireless clients. The 802.1x
broadcast-key-refresh-rate command specifies the
interval after which the broadcast keys are changed. The
802.1x session-key-refresh-rate command specifies the
interval after which unicast session keys are changed.
• Dynamic broadcast key rotation allows the access point to
generate a random group key and periodically update all
key-management capable wireless clients.
Example
802.1x session-key-refresh-rate
This command sets the interval at which unicast session keys are
refreshed for associated stations using dynamic keying.
Syntax
802.1x session-key-refresh-rate <rate>
rate - The interval at which the access point refreshes a session
key. (Range: 0 - 1440 minutes)
Default Setting
0 (Disabled)
Command Mode
Global Configuration
Command Usage
Session keys are unique to each client, and are used to
authenticate a client connection, and correlate traffic passing
between a specific client and the access point.
AP(config)#802.1x broadcast-key-refresh-rate 5
AP(config)#