configure netlogin radius reauthentication resume

configure netlogin radius reauthentication resume [ grace-period grace_period} {restart-dot1x-ports [ on | off ]}]

Description

Ends the RADIUS reauthentication pause.

Syntax Description

reauthenticationConfigures RADIUS reauthentication.
resumeConfigures parameters applied when RADIUS reauthentication resumes after a pause.
grace-periodSets the grace period for unauthenticated clients to re-authenticate after reauthentication resumes.
grace_periodGrace period in seconds. Range: 0–65535. Default: 120.
restart-dot1x-portsRestarts ports of 802.1x clients that remain unauthenticated when reauthentication resumes.
onEnables restart of 802.1x ports for unauthenticated clients on resume.
offDisables restart of 802.1x ports for unauthenticated clients on resume. This is the default.

Default

N/A.

Usage Guidelines

Use this command to configure the behavior of RADIUS reauthentication when it resumes after a pause. This command is only applicable when netlogin is operating in policy mode.

The grace-period option allows unauthenticated clients a window of time to re-authenticate after reauthentication resumes, avoiding immediate loss of access. If restart-dot1x-ports is enabled, ports of 802.1x clients that remain unauthenticated at the end of the grace period are restarted to trigger a fresh authentication attempt.

To display the current configuration, use the show netlogin command.

Example

The following example configures a 90-second grace period and enables 802.1x port restart when RADIUS reauthentication resumes:

# configure netlogin radius reauthentication resume grace-period 90 restart-dot1x-ports on

History

This command was first available in version 33.6.1.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, and X695 series switches.