Port security & dot1x

Unanswered Question
Sep 22nd, 2007
User Badges:


I'm trying to set up dot1x with MAC authentication bypass (MAB) on a C3560, and I want the switch to send a SNMP trap upon authentication failure.

Q: Can port security and MAB be combined in this way?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
jafrazie Mon, 09/24/2007 - 15:14
User Badges:
  • Cisco Employee,

Have you tried looking at your AAA server's failure logging capabilities?

Is this for troubleshooting? Unfortunately, the switch may not have all the details on why the session fails ..


etxlews-SE Tue, 09/25/2007 - 07:55
User Badges:

No, I have not.

My intention was to test the concept: can the switch send a trap when a Radius-reject is received?

Will it be possible to define such a (security violation) action together with dot1x?

Thanks Leo


This Discussion