Configures the switch to remove all Kerberos snooping entries after the specified time expires.
minutes |
Specifies the aging time in minutes. The range is 1 to 65535 minutes. |
none |
Disables the Kerberos force-aging feature. |
N/A.
If Kerberos force aging is enabled, we recommend that the Kerberos snooping force aging time be set to the same value as the Kerberos ticket lifetime.
The following command removes all Kerberos snooping entries after 600 minutes:
* Switch.4 # configure identity-management kerberos snooping force-aging time 600
This command was first available in ExtremeXOS 12.6.
This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.