cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
227
Views
3
Helpful
2
Replies

Dot1X client re-authentication timer

KoenPintens
Community Member

Hi

Is there a way to change the timer for when a clients needs to re-authenticate?  We lost connection to the Radius servers and wireless clients were cut off quite rapidly in comparison with the wired ones [authentication timer reauthenticate is on the switchports].

Thanks in advance

 

Koen

2 Replies 2

Htonieto
Level 6
Level 6

Hello @KoenPintens 

At least on Cisco switches, 802.1X reauthentication is not enabled by default, but you mentioned that it is configured in your environment. Wireless is a different story, as it relies heavily on time‑based reauthentication.

You can try increasing the RADIUS Session‑Timeout and WLAN Session Timeout values so sessions last longer and require fewer periodic authentications.

Also, ensure that PMK caching and/or 802.11r is enabled. This helps during client roaming, as roaming events do not require contacting RADIUS. If RADIUS is unreachable, clients may otherwise fail to roam successfully.

Thank you will give that a go

Review Cisco Networking for a $25 gift card