Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

wds radius re-authentication

Have a very simple AP setup with WDS and external radius server. Users constantly complain that after about an hour they have to re-authenticate. Any ideas?

thx

1 REPLY
Hall of Fame Super Red

Re: wds radius re-authentication

Hi Bill,

There must be a reauth period parameter set on either the AP or Radius server (perhaps group or client settings). Here is what to look for on the AP;

dot1x reauth-period

Use the dot1x reauth-period configuration interface command to configure the dot1x client- reauthentication period. The no form of the command disables reauthentication.

[no] dot1x reauth-period {1-65555 | server}

Syntax Description 1-65555

Specifies a number of seconds (1 to 65555)

server Specifies reauthentication period configured on the authentication server. If you use this option, configure your authentication server with RADIUS attribute 27, Session-Timeout. This attribute sets the maximum number of seconds of service to be provided to a client device before termination of the session. The server sends this attribute to the access point when a client performs EAP authentication.

This example shows how to configure a 60-minute dot1x client-reauthentication period:

AP(config-if)# dot1x reauth-period 3600

http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_command_reference_chapter09186a0080341ee7.html#wp2454059

Hope this helps!

Rob

Please remember to rate helpful posts.....

373
Views
0
Helpful
1
Replies
CreatePlease to create content