Search This Blog

Monday, 7 February 2011

dot11 holdoff-time

dot11 holdoff-time

This one threw me. You can use this with EAP and MAC auth to freeze out clients that fail to log in properly to prevent DoS.

Use the dot11 holdoff-time global configuration command to specify the hold-off time for EAP and MAC address authentication. The holdoff time is invoked when a client fails three login attempts or fails to respond to three authentication requests from the access point. Use the no form of the command to reset the parameter to defaults.
[no] dot11 holdoff-time seconds

Syntax Description


Specifies the hold-off time (1 to 65555 seconds)


The default holdoff time is 0 (disabled).

Command Modes

Global configuration

Command History




This command was introduced.


This example shows how to specify a 2-minute hold-off time:
AP(config)# dot11 holdoff-time 120
This example shows how reset the hold-off time to defaults:
AP(config)# dot11 no holdoff-time

No comments:

Post a Comment