BigIron RX Series Configuration Guide 96353-1001986-01Configuring 802.1x port security 33Setting the quiet periodIf the BigIron RX is unable to authenticate the Client, the BigIron RX waits a specified amount oftime before trying again. The amount of time the BigIron RX waits is specified with the quiet-periodparameter. This timer also indicates how long a client that failed authentication would have itsblocked entry programmed into the hardware.The quiet-period parameter can be from 0 –4294967295 seconds. The default is 60 seconds.For example, to set the quiet period to 30 seconds, enter the following command.BigIron RX(config-dot1x)# timeout quiet-period 30Syntax: [no] timeout quiet-period Setting the interval for retransmission of EAP-request/identity framesWhen the BigIron RX sends a Client an EAP-request/identity frame, it expects to receive anEAP-response/identity frame from the Client. If the Client does not send back anEAP-response/identity frame, the device waits a specified amount of time and then retransmits theEAP-request/identity frame. You can specify the amount of time the BigIron RX waits beforeretransmitting the EAP-request/identity frame to the Client. This amount of time is specified withthe tx-period parameter. The tx-period parameter can be from 1 – 65535 seconds. The default is30 seconds.For example, to cause the BigIron RX to wait 60 seconds before retransmitting anEAP-request/identity frame to a Client, enter the following command.BigIron RX(config-dot1x)# timeout tx-period 60Syntax: [no] timeout tx-period If the Client does not send back an EAP-response/identity frame within 60 seconds, the device willtransmit another EAP-request/identity frame.Specifying the number of EAP-request/identity frame retransmissionsIf the BigIron RX does not receive a EAP-response/identity frame from a Client, the device waits 30seconds (or the amount of time specified with the timeout tx-period command), then retransmitsthe EAP-request/identity frame. By default, the BigIron RX retransmits the EAP-request/identityframe a maximum of two times. If no EAP-response/identity frame is received from the Client aftertwo EAP-request/identity frame retransmissions, the device restarts the authentication processwith the Client.You can optionally specify between 1 – 10 frame retransmissions. For example, to configure thedevice to retransmit an EAP-request/identity frame to a Client a maximum of three times, enter thefollowing command.BigIron RX(config-dot1x)# maxreq 3Syntax: maxreq
