Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Optimize response Dot1x

With the default parameters of the time it takes dot1x interface to get to the Guest-Vlan 40 is 3:30 minutes.
Dot1x parameters with modified lines are shown below has been made to optimize the time to 1:30 minutes. It takes much more to optimize even better user experience.

CISCO CATALYST 2960

c2960-lanbasek9-mz.122-46.SE.bin

Configure:

HSEE-GAR-SW51#show run int fas 0/31
Building configuration...

Current configuration : 432 bytes
!
interface FastEthernet0/31
switchport mode access
switchport port-security
switchport port-security violation restrict
dot1x pae authenticator
dot1x port-control auto
dot1x violation-mode protect
dot1x timeout quiet-period 1
dot1x timeout tx-period 1
dot1x timeout supp-timeout 1
dot1x guest-vlan 40
dot1x auth-fail vlan 40
dot1x auth-fail max-attempts 1
spanning-tree bpduguard enable
spanning-tree guard root
end

dot1x settings:

HSEE-GAR-SW51#show dot1x int fas 0/31
Dot1x Info for FastEthernet0/31
-----------------------------------
PAE                       = AUTHENTICATOR
PortControl               = AUTO
ControlDirection          = Both
HostMode                  = SINGLE_HOST
Violation Mode            = PROTECT
ReAuthentication          = Disabled
QuietPeriod               = 1
ServerTimeout             = 0
SuppTimeout               = 1
ReAuthPeriod              = 3600 (Locally configured)
ReAuthMax                 = 2
MaxReq                    = 2
TxPeriod                  = 1
RateLimitPeriod           = 0
Auth-Fail-Vlan            = 40
Auth-Fail-Max-attempts    = 1
Guest-Vlan                = 40
"

Can  you help us improve this time?

Thank you.

S.

440
Views
0
Helpful
0
Replies
CreatePlease to create content