dot11 holdoff-time

dot11 holdoff-time

This one threw me. You can use this with EAP and MAC auth to freeze out clients that fail to log in properly to prevent DoS.

Use the dot11 holdoff-time global configuration command to specify the hold-off time for EAP and MAC address authentication. The holdoff time is invoked when a client fails three login attempts or fails to respond to three authentication requests from the access point. Use the no form of the command to reset the parameter to defaults.

[no] dot11 holdoff-time seconds

Syntax Description

seconds

Specifies the hold-off time (1 to 65555 seconds)

Defaults

The default holdoff time is 0 (disabled).

Command Modes

Global configuration

Command History

Release	Modification
12.2(4)JA	This command was introduced.

Examples

This example shows how to specify a 2-minute hold-off time:

AP(config)# dot11 holdoff-time 120

This example shows how reset the hold-off time to defaults:

AP(config)# dot11 no holdoff-time