Blocking clients with repeating failed attempts in ACS 5.4

[naorelkayam]

Hi

I use my ACS to authenticate clients from both LNS ans wireless.

There are always users with wrong configuration that repeat the authentication process and fail thousands time and 'hammer' the ACS servers.

Is there a way to block repeated failed attempts?

Thanks!

Naor.

[hdussa]

Hi Naor,

with "authentication timer restart 0 " is blocked. I used 900 which is 15 minutes, before the authentication process starts again.

Horst

[naorelkayam]

Hi, and thanks for the quick reply! Few questions:

That will prevent clients from re-authenticating for 15 minutes?

If so, how client will be able to roam on campus? that requires re-authentication...

Naor.

[naorelkayam]

Hi,

Is there no other way to block clients from DOSing my ACS server without affecting my legitimate clients?

Thanks!