Dot1x misconfigured supplican timeout

gabrieleferrari — Fri, 21 Feb 2020 18:58:14 GMT

Hi Guys,

I've to solve an interesting problem. In an 802.1x environment if the supplicant is configured correctly, all is supposed to work as expected without any issue.

But what happens if an employee from company A with a supplicant configured with his company parameters (including the automatic use of credentials used for login) try to connect to an 802.1x ready network in comany B? Of course the authentication fails but he might still reach the condition of wired Guest.

Unfortunately with default timeout parameters it takes more or less 8 minutes to reach the Auth Failover status.

I've tried several combinations of timeout parameters, following an example of the custom timeout parameter:

int g1/0/1

authentication timer restart 10
dot1x timeout quiet-period 10
dot1x timeout server-timeout 10
dot1x timeout tx-period 10
dot1x timeout supp-timeout 10
dot1x timeout ratelimit-period 10
dot1x max-reauth-req 1
dot1x timeout start-period 10
dot1x timeout held-period 10
dot1x timeout auth-period 10

but the time took for authentication is still more than 5 minutes

Does anyone has some suggestion?

Thanks

Regards

Gabriele

Re: Dot1x misconfigured supplican timeout

Anton Abik — Tue, 18 Mar 2025 20:21:57 GMT

Have you solved this somehow?

topic Dot1x misconfigured supplican timeout in Network Access Control

Dot1x misconfigured supplican timeout

Re: Dot1x misconfigured supplican timeout