8 re-authentication by the client service, 9 periodic client re-authentication by the switch – Barracuda Networks VERSION SP4 User Manual

Page 195

Advertising
background image

193 Barracuda NG Network Access Client - Administrator’s Guide

14.3.8

Re-authentication by the client service

The client service is able to enforce a re-authentication, given the configured interval (see 2.0.A),
independent of the switch's configuration. After the configured amount of seconds elapsed the Client
service will start the authentication sequence. By sending a EAPOL Start packet (see: 2.3.I) and
waiting for the identity request starting the authentication sequence (see: 2.3.II).

14.3.9

Periodic client re-authentication by the switch

You can enable periodic 802.1X client re-authentication and specify how often it occurs. If you do not
specify a time period before enabling re-authentication, the number of seconds between
re-authentication attempts is 3600 (1 hour). This option must be changed either through a command
line interface on the switch or the web interface.

Beginning in privileged EXEC mode, follow these steps to enable periodic re-authentication of the
client and to configure the number of seconds between re-authentication attempts.

Commands:

configure terminal

Enter global configuration mode

interface <interface-id>

Specify the port to be configured, and enter interface configuration mode

dot1x re-authentication

Enable periodic re-authentication of the client, which is disabled by default.

dot1x timeout reauth-period <seconds>

Set the number of seconds between re-authentication attempts.

The range is 1 to 65535; the default is 3600 seconds.

This command affects the behavior of the switch only if the periodic re-authentication is en-
abled.

end

Return to privileged EXEC mode.

show dot1x interface

Verify your entries

Table 14–10

Registry entry for 802.1X authentication

Item

Description

Path

HKEY_USERS\.Default\Software\phion\phionvpn\settings

Key

8021XReAuthPeriod

Value

Desired number of seconds the "Client" service must wait until re-authentication (Default 3600 seconds)

• 0 - 4294967295

Changes of this value will take effect with the next health evaluation by the Barracuda NG Access Monitor service

.

Advertising