topic Re: Live Log - Repeat Counter in Network Access Control

Live Log - Repeat Counter

Magroll — Fri, 08 Mar 2019 08:28:24 GMT

Hi,

I'm detecting a Client (Win 10 with 802.1x Config) with massive high Repeat Counter.

Could anyone explain me, what the reason could be? Is such behavior normal?

Should I investigate the Client? What should I tell the Helpdesk Team to look for?

Thank you,

Mag

Re: Live Log - Repeat Counter

Nadav — Fri, 08 Mar 2019 17:38:03 GMT

I'm not familiar with Windows allowing the supplicant to set a reauthentication interval, so I'd check the switch.

Check the reauthentication timer on the switchport. Within 60*60*24=86400 seconds, it's authenticated 6220 times. So just around 13-14 seconds between authentications on average. Definitely not standard unless there is a lot of link flapping going on.