Hi Bill,
There must be a reauth period parameter set on either the AP or Radius server (perhaps group or client settings). Here is what to look for on the AP;
dot1x reauth-period
Use the dot1x reauth-period configuration interface command to configure the dot1x client- reauthentication period. The no form of the command disables reauthentication.
[no] dot1x reauth-period {1-65555 | server}
Syntax Description 1-65555
Specifies a number of seconds (1 to 65555)
server Specifies reauthentication period configured on the authentication server. If you use this option, configure your authentication server with RADIUS attribute 27, Session-Timeout. This attribute sets the maximum number of seconds of service to be provided to a client device before termination of the session. The server sends this attribute to the access point when a client performs EAP authentication.
This example shows how to configure a 60-minute dot1x client-reauthentication period:
AP(config-if)# dot1x reauth-period 3600
http://www.cisco.com/en/US/products/hw/wireless/ps4570/products_command_reference_chapter09186a0080341ee7.html#wp2454059
Hope this helps!
Rob
Please remember to rate helpful posts.....
