802.1x settings

Can some one explan the difference beween these two commands for dot1z please

dot1x timeout supp-timeout

"The client notifies the switch that it received the EAP-request frame. If the switch does not receive this notification, the switch waits a set period of time, and then retransmits the frame. You may set the amount of time that the switch waits for notification from 1 to 65535 seconds. (The default is 30 seconds.) "

and

dot1x timeout tx-period 10

The client responds to the EAP-request/identity frame from the switch with an EAP-response/identity frame. If the switch does not receive this response, it waits a set period of time (known as the retransmission time), and then retransmits the frame.

Am i correct in thinking the first statment is only for the first eap frame (the initial responce) and the second is for all further frames in the conversation?

Cheers

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

ConstantlyLearning

Are those explanations from the same documention for the same version of software?

DevilWAH

yes same doc one after the other.

creamy_stew

If I read that correctly, the first value is how log the switch actually waits before it times out the auth.

The second value is how often it will try and resend to the client.

Dunno though. Wasn't even aware of those commands TBH.

DevilWAH

nope there a third command to set the retry number

that by default is 3 times

dot1x max-req 5
or dot1x max-reauth-req 4

how may time to resend the packet, and how many time to restart the whole authentication process

Looking at the time outs a bit more, one it seems is the switch sourced eap packet to client packets reply, and one is for when the switch forwards a packet from the server to the client and waiting for a reply.