Configuring EAP on a port

1. Enter GigabitEthernet Interface Configuration mode:

   enable

   configure terminal

   interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...]}

   

   Note

   If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

2. Configure the maximum EAP requests sent to the supplicant before timing out the session:

   eapol port {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]} max-request <1-10>

3. Configure the time interval between authentication failure and the start of a new authentication:

   eapol port {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]} quiet-interval <1-65535>

4. Enable reauthentication:

   eapol port {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]} re-authentication enable

5. Configure the time interval between successive authentications:
   eapol port {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]} re-authentication-period <1-65535>

   

   Note

   The EAP re-authentication period value is between 1-65535. Early releases support up to 2147483647. To maintain backward compatibility the CLI value is between 1–2147483647. Trying to configure above 65535 results in an error.

6. Configure the EAP authentication status:

   eapol port {slot/port[/sub-port] [-slot/port[/sub-port]] [,...]} status {authorized|auto}

Example

Configure the maximum EAP requests sent to the supplicant before timing out the session:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface GigabitEthernet 1/2
Switch:1(config-if)#eapol max-request 10
Switch:1(config-if)#eapol port 1/2 quiet-interval 500