Switch reboot issue - delay in AAA authentication

Alex Pfeil · ‎03-02-2010

1. I reboot a switch and start a constant ping to the switch.

2. The ping begins to receive replies.

3. I try to log into the switch and it fails. If you try and console into the device, it says authentication fails three times and goes back to the press any key to get started prompt.

4. three to five minutes go by and I can log into the switch.

The other issue that this causes is devices fail authentication when the switch comes up and all of the ports go into err-disable state.

This is a 3750 switch but it happens on all my switches.

Is this part of the design or can this be fixed?

Thanks,

Alex Pfeil

jedubois · ‎03-02-2010

Alex,

This sounds a lot like CSCsw79561 which is fixed in 12.2(52)SE and higher.

If you are currently on 12.2(46)SE or earlier you will notice that the 802.1x

port configuration has changed some and you will want to review this before upgrading:

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_52_se/configuration/guide/sw8021x.html

--Jesse

Alex Pfeil · ‎03-02-2010

The caveat that you gave is the exact issue I am having. However, I am running 12.2(53)SE and I am still having the same issue. Is there a specific command that will alleviate this issue?

Thanks,

Alex Pfeil

jedubois · ‎03-02-2010

Alex,

There is no command to be added, it was a fix in the code.

Since you are seeing this on a fixed version I would open a

TAC case and have it looked into further.

--Jesse