How to get an AP1200 to stop processing auth requests after a set # of fail
I have a group of 1200 series AP's deployed in a school using MAC authentication and WEP. The MAC addresses are authenticated by a FreeRADIUS Server. I'm having an issue with students attempting to connect personal Laptop PC's to the AP's. These repeated attempts are reaping havoc with my logs.
Is there a way to get the AP to simply ignore Auth requests from a client after a set number of failed attempts?
I'm Thinking the command
aaa authentication attempts login
will limit the number of attempts, but am not sure if the set value will apply to each client or all clients. ie if I set the value to 10, does each client get 10 tries is is the total of 10 applied cumulatively to all clients?
Yes, you can use the maximum retries option on the AAA server to limit the number of times the clients can try to access a network. The value of the maximum retries can be configured manually on the AAA server or can be left to use the default number of retries which depends on the aaa server used.
To keep failed attemps from beating up on your servers use the command
From the documentation:
Use the dot11 holdoff-time global configuration command to specify the hold-off time for EAP and MAC address authentication.
The holdoff time is invoked when a client fails three login attempts or fails to respond to three authentication requests from the access point. Use the no form of the command to reset the parameter to defaults.
Listen: https://smarturl.it/CCRS8E33 Follow us: https://twitter.com/ciscochampion The goal for stadium and large venue Wi-Fi is to deliver an exceptional, fast, and reliable wireless experiences to tens of thousands of fan...
We are pleased to announce the immediate availability of the IOS-XE release 17.6.1 for the Catalyst Wireless Controllers. The new code is now posted on the CCO and can be found at this link:
This version now introduces experimental new feature, "Upgrade Advisor, targeted to one of common case generators: what are the supported versions and how to upgrade my current controllers and APs
It supports both AireOS and IOS-XE, covering since ...
Thank you for the overwhelming response to the First and Second EFT refresh of 8.10MR6!
We are excited to announce the third refresh of 8.10 MR6 EFT Program for PRODUCTION deployments.
While the CCO release of 8.10MR6 is just a few we...
Greetings!Thank you for the overwhelming response and feedback for the first 17.3.4 EFT/Beta release.
Now we are excited to announce the second refresh of 17.3.4 EFT/Beta Program for PRODUCTION deployments.
This release is the s...