I configured 802.1x with VLAN assignment on a WS-C2950T-24 with system image file c2950-i6q4l2-mz.121-22.EA1.bin. The RADIUS server is FreeRadius 1.0.1. Everything works well.
I cut&pasted the same 802.1x configuration on a WS-C2950T-48-SI with the same image. I connected the very same supplicant (a Laptop with Windows XP) which was working on the WS-C2950T-24. It doesn't work on the WS-C2950T-48-SI.
I could verify the following :
- the log of the radius are identical in both cases. They end with "Login OK" and an EAP Accept-Packet containing :
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "72"
(72 is the excepted VLAN if 802.1x auth. completes successfully)
- on the WS-C2950T-48-SI, the "show dot1x all" command shows that the port is in the following state :
Dot1x Info for interface FastEthernet0/48
Supplicant MAC 0008.74e2.fbb6
AuthSM State = AUTHENTICATED
BendSM State = IDLE
PortStatus = AUTHORIZED
MaxReq = 2
HostMode = Single
Port Control = Auto
and the "show VLAN" shows that the port remained in VLAN 1.
- moreover, on the WS-C2950T-48-SI, I noticed that the "dot1x guest-vlan" does not exist :
% Invalid input detected at '^' marker.
Is there a difference on how both switches handle 802.1X ?