The "window" or range of valid authentication codes varies depending on the state of the token and values in the token's seed record.  For example seed records often contain the following windowing parameters:

Small Window:    3

Medium Window: 7

Large Window:    100

Max Counter:      50000

SAE authenticates codes found inside the ?Accept Window? and rejects values outside the ?Reject Window?.  Codes that fall between the accept and reject windows (where accept != reject) causes next tokencode mode.

State                            Accept Window                         Reject Window

--------                            ----------------------                          ---------------------

1^st login                         Large-1                                     Large-1

Normal                          small                                        medium

Waiting for PIN              small                                        medium

Next Tokencode Mode    2                                              2

Resynch (1^st)                 max counter                              max counter

Resynch (2^nd)                 2                                              2