Client exclusion - Maximum 802.1 x-AAA failure attempts

[RDavidov]

Hello

Is it possible to change Maximum 802.1 x-AAA failure attempts values on WLC 9800 series?

The documentation only contains a description of this function, but does not indicate how to change this values

Excessive 802.1X Authentication Failures—Clients are excluded on the fourth 802.1X authentication attempt, after three consecutive failures.

For example by default Excessive 802.1X Authentication Failures is 3, can i change it to 5 or more ?

[marce1000]

 - Using some kind of 'brute force attack' on the issue with :
                   # show running-config all | inc aaa
   I notice :
                 >....
                 >aaa authentication attempts login 3
                 >...

               Change accordingly (with CLI in the running-config) , check if that works as intended

 M.

[RDavidov]

thanks, I'll try this option

[pieterh]

AFAIK client exclusion is handled at the authentication server
if this is Active Directory -> check there

[MHM Cisco World]

The wlc exclusive list have it policy and this policy have defualt set for times authc failed are this what you ask for?

MHM

[RDavidov]

Yes. Is it possible to change the values in this policy so that the client gets on the exclusive list, for example, after 5 attempts ?