802.1x Doubts

Tauer Drumond · ‎07-07-2008

hi, im getting some problems with 802.1x and my 3560 switch is showing me the logs, when I enable the EAP debugging. Please check this out:

002952: 4d01h: EAP-EVENT: 'Authenticator ReqId Retransmit' timer expired for EAP

sesion handle 0x9800000E

002953: 4d01h: eap_authen : during state eap_auth_idle, got event 22(eapRetr

ansmitTmo)

002954: 4d01h: @@@ eap_authen : eap_auth_idle -> eap_auth_retransmit

002955: 4d01h: eap_authen : during state eap_auth_retransmit, got event 23(e

apTmoRetry)

002956: 4d01h: @@@ eap_authen : eap_auth_retransmit -> eap_auth_tx_packet

002957: 4d01h: EAP-AUTH-EVENT: Resending last packet for context 0x9800000E

002958: 4d01h: eap_authen : idle during state eap_auth_tx_packet

002959: 4d01h: @@@ eap_authen : eap_auth_tx_packet -> eap_auth_idle

002960: 4d01h: EAP-AUTH-EVENT: Sending packet to lower layer for context 0x98000

00E

002961: 4d01h: EAP-AUTH-TX-PAK: Code:REQUEST ID:0x18 Length:0x0005 Type:IDENT

ITY

002962: 4d01h: EAP-EVENT: Started 'Authenticator ReqId Retransmit' timer (30s) f

or EAP sesion handle 0x9800000E

002963: 4d01h: EAP-EVENT: Sending lower layer event 'EAP_TX_PACKET' on handle 0x

9800000E

Is anything wrong?

dominic.caron · ‎07-07-2008

Hi,

Looks like your supplicant is not responding to the switch eap msgs.

Tauer Drumond · ‎07-07-2008

I assume my supplicant is the host.

Is it not sending EAP requests to the switch?

What about the authentication server?

dominic.caron · ‎07-10-2008

Yes, the supplicant is on the host. The switch is sending eap request but the host is not responding. You dont exchange eap packet with the aaa server.

What type of host/supplicant are you using in your test ?

Tauer Drumond · ‎07-10-2008

Hi Dominic,

I'm using a Windows XP host.

Please check the attachment. It shows what 802.1x authentication I'm using and that I have a computer certificate installed on the host.

I really don't know what to do right now. I think everything is allright...

Can you help me?