Viewing and Configuring Global 802.1X Settings 319To support SSIDs that have both 802.1X and static WEP clients, MSSsends a maximum of two ID requests, even if this parameter is set to ahigher value. Setting the parameter to a higher value does affect all othertypes of EAP messages.8 To enable encryption key information to be sent to the client afterauthentication in EAPoL-Key PDUs, select Key Transmit.The WX switch sends EAPoL key messages after successfullyauthenticating the client and receiving authorization attributes for theclient. If the client is using dynamic Wired-Equivalent Privacy protocol(WEP), the EAPoL key messages are sent immediately after authorization.To disable this option, clear Key Transmit. By default, this option isenabled.9 To enable reauthentication of 802.1X clients, select Reauthentication.To disable reauthentication, clear Reauthentication. By default,reauthentication is enabled.10 To specify the number of reauthentication requests the WX switchattempts before a client becomes unauthorized, specify the value(1 to 10) in the Reauthentication Attempts box. The default is 2 attempts.If the number of reauthentications for a wired authentication client isgreater than the maximum number of reauthentications allowed, MSSsends an EAP failure packet to the client and removes the client from thenetwork. However, MSS does not remove a wireless client from thenetwork under these circumstances.11 To specify the number of seconds before reauthentication is attempted,specify the timeout value, from 60 to 1,641,600 seconds (19 days), in theReauthentication Period box. The default is 3600 seconds (one hour).MSS reauthenticates dynamic WEP clients based on the reauthenticationtimer. MSS also reauthenticates WPA clients if the clients use the WEP-40or WEP-104 cipher. For each dynamic WEP client or WPA client using aWEP cipher, the reauthentication timer is set to the lesser of the globalsetting or the value returned by the AAA server with the rest of theauthorization attributes for that client.12 To enable WEP key rolling (rotation) of the broadcast and multicast WEPkeys, select WEP Key Rolling.13 To specify the time to wait before rotating the WEP key, specify the value,from 30 to 1,641,600 seconds, (19 days) in the WEP Key Rolling Periodbox. The default is 3600 seconds (one hour).
