Mac Authentication Bypass issue on cat4506 switches

marce1000 · ‎11-05-2008

We are migrating from VMPS/URT to MAB on cat4506 switches. Were having a painstaking issue where sometimes after a number of weeks ports get in the UNAUTHENTICATING state, seemingly no longer using MAB as the authenticating process.

Currently we are using the latest IOS

for cat4506 (12.2(46)).

Hints solutions welcomed.

Marc.

-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

drolemc · ‎11-11-2008

Use the dot1x host-mode interface configuration command on the switch stack or on a standalone switch to allow a single host (client) or multiple hosts on an 802.1x-authorized port that has the dot1x port-control interface configuration command set to auto. Use the no form of this command to return to the default setting. Basically, add this line to your port config:

dot1x host-mode multi-host