Live Log - Repeat Counter

[Magroll]

Hi,

I'm detecting a Client (Win 10 with 802.1x Config) with massive high Repeat Counter.

Could anyone explain me, what the reason could be? Is such behavior normal?

Should I investigate the Client? What should I tell the Helpdesk Team to look for?

Thank you,

Mag

[Nadav]

I'm not familiar with Windows allowing the supplicant to set a reauthentication interval, so I'd check the switch.

Check the reauthentication timer on the switchport. Within 60*60*24=86400 seconds, it's authenticated 6220 times. So just around 13-14 seconds between authentications on average. Definitely not standard unless there is a lot of link flapping going on.