You are here: Home > CLI Commands > Just_CLI_Topics > aaa timers

aaa timers

aaa timers

dead-time <minutes>

idle-timeout <time> [seconds]

logon-lifetime <0-255>

stats-timeout <time> [seconds]


This command configures the timers that you can apply to clients and servers.






dead-time <minutes>

Maximum period, in minutes, that the Mobility Master considers an unresponsive authentication server to be out of service.

This timer is only applicable if there are two or more authentication servers configured on the Mobility Master. If there is only one authentication server configured, the server is never considered out of service and all requests are sent to the server.

If one or more backup servers are configured and a server is unresponsive, it is marked as out of service for the dead time; subsequent requests are sent to the next server on the priority list for the duration of the dead time. If the server is responsive after the dead time has elapsed, it can take over servicing requests from a lower-priority server; if the server continues to be unresponsive, it is marked as down for the dead time.


10 minutes


Maximum number of minutes after which a client is considered idle if there is no user traffic from the client.

The timeout period is reset if there is a user traffic. If there is no IP traffic in the timeout period or there is no 802.11802.11 is an evolving family of specifications for wireless LANs developed by a working group of the Institute of Electrical and Electronics Engineers (IEEE). 802.11 standards use the Ethernet protocol and Carrier Sense Multiple Access with collision avoidance (CSMA/CA) for path sharing. traffic as indicated in the station ageout time that is set in the wlanWireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. ssidService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. profile, the client is aged out. Once the timeout period has expired, the user is removed immediately and no ping request is sent. If the seconds parameter is not specified, the value defaults to minutes.

1 to 255 minutes (30 to 15300 seconds)

5 minutes
(300 seconds)


Maximum time, in minutes, that unauthenticated clients are allowed to remain logged on.


5 minutes


User Interim stats timeout value. If the seconds parameter is not specified, the value defaults to minutes.

5-60 minutes(
300 to 3600 seconds)

10 minutes

(600 seconds)

Usage Guidelines

These parameters can be left at their default values for most implementations.


The following command changes the idle time to 10 minutes:

(host) ^[md] (config) aaa timers idle-timeout 10

Related Commands



show aaa timers

Displays AAAAuthentication, Authorization, and Accounting. AAA is a security framework to authenticate users, authorize the type of access based on user credentials, and record authentication events and information about the network access and network resource consumption. timer values.

show datapath

Displays datapath user statistics such as current entries, pending deletes, high water mark, maximum entries, total entries, allocation failures, invalid users and maximum link length.

Command History




Updated the range of stats-timeout parameter.


Command introduced.

Command Information



Command Mode

All platforms

Base operating system.

Config mode on Mobility Master.