802.1x Doubts

Unanswered Question
Jul 7th, 2008
User Badges:

hi, im getting some problems with 802.1x and my 3560 switch is showing me the logs, when I enable the EAP debugging. Please check this out:

002952: 4d01h: EAP-EVENT: 'Authenticator ReqId Retransmit' timer expired for EAP

sesion handle 0x9800000E

002953: 4d01h: eap_authen : during state eap_auth_idle, got event 22(eapRetr


002954: 4d01h: @@@ eap_authen : eap_auth_idle -> eap_auth_retransmit

002955: 4d01h: eap_authen : during state eap_auth_retransmit, got event 23(e


002956: 4d01h: @@@ eap_authen : eap_auth_retransmit -> eap_auth_tx_packet

002957: 4d01h: EAP-AUTH-EVENT: Resending last packet for context 0x9800000E

002958: 4d01h: eap_authen : idle during state eap_auth_tx_packet

002959: 4d01h: @@@ eap_authen : eap_auth_tx_packet -> eap_auth_idle

002960: 4d01h: EAP-AUTH-EVENT: Sending packet to lower layer for context 0x98000


002961: 4d01h: EAP-AUTH-TX-PAK: Code:REQUEST ID:0x18 Length:0x0005 Type:IDENT


002962: 4d01h: EAP-EVENT: Started 'Authenticator ReqId Retransmit' timer (30s) f

or EAP sesion handle 0x9800000E

002963: 4d01h: EAP-EVENT: Sending lower layer event 'EAP_TX_PACKET' on handle 0x


Is anything wrong?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dominic.caron Mon, 07/07/2008 - 12:08
User Badges:
  • Silver, 250 points or more


Looks like your supplicant is not responding to the switch eap msgs.

Tauer Drumond Mon, 07/07/2008 - 12:16
User Badges:

I assume my supplicant is the host.

Is it not sending EAP requests to the switch?

What about the authentication server?

dominic.caron Thu, 07/10/2008 - 06:15
User Badges:
  • Silver, 250 points or more

Yes, the supplicant is on the host. The switch is sending eap request but the host is not responding. You dont exchange eap packet with the aaa server.

What type of host/supplicant are you using in your test ?

Tauer Drumond Thu, 07/10/2008 - 06:54
User Badges:

Hi Dominic,

I'm using a Windows XP host.

Please check the attachment. It shows what 802.1x authentication I'm using and that I have a computer certificate installed on the host.

I really don't know what to do right now. I think everything is allright...

Can you help me?



This Discussion