This setting applies to the following modes, i.e. modes using the Port Security functionality to secure MAC addresses: Single 802.1X, Multi 802.1X, MAC-Based Auth. If a client is denied access - either because the RADIUS server denies the client access or because the RADIUS server request times out, the client is put on hold in the Unauthorized state. The hold timer does not count during an on-going authentication. In MAC-based Auth. mode, the switch will ignore new frames coming from the client during the hold time. The Hold Time can be set to a number between 10 and 1000000 seconds..