Switching

 View Only
last person joined: yesterday 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.

  • 1.  dot1x and server-fail use-cache

    Posted 09-11-2014 17:43

    Hi.
    I have a question about dot1x with server-fail use-cache behavior.


    Let`s view two cases:

    1) Supplicant successfully authenticate, RADIUS server become unavailable, reauthentication timer expires, supplicant tries to authenticate and EX use auth cache and reauthenticate client.
    All clear here.

    2) RADIUS server become unavailable and new supplicant tries to authenticate. How will behave EX in this case with server-fail use-cache option?


    #dot1x


  • 2.  RE: dot1x and server-fail use-cache
    Best Answer

     
    Posted 09-12-2014 00:22

    No access for the new suplicants. Basically, this knob is not doing anything for the new suplicants.

     

     

    =====

    If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.



  • 3.  RE: dot1x and server-fail use-cache

    Posted 09-14-2014 15:22

    Thanks.

    You absolutely right.

    My bad, I miss statement "new users will be denied access" in Configuring Server Fail Fallback (CLI Procedure)