10.3.1 Operation after authentication failure

If a terminal fails MAC-based authentication, the switch makes no more attempts to authenticate the terminal for a fixed time period (called the re-authentication interval). When this period has elapsed, the switch attempts MAC-based authentication for that terminal again.

You can set the re-authentication interval by using the mac-authentication auth-interval-timer configuration command. The authentication process typically resumes within a minute of the re-authentication period elapsing.

Figure 10-6: Operation sequence after authentication failure