00:39:03: dot1x-sm:Posting QUIET_WHILE_EXPIRE on Client=16EC5E0 00:39:03: dot1x_auth Fa0: during state auth_held, got event 5(quietWhile_expire) 00:39:03: @@@ dot1x_auth Fa0: auth_held -> auth_restart 00:39:03: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_held_exit called 00:39:03: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_restart_enter called 00:39:03: dot1x-ev:Sending create new context event to EAP for 001d.927f.3fcb 00:39:03: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_held_restart_action called 00:39:03: dot1x-sm:Posting !EAP_RESTART on Client=16EC5E0 00:39:03: dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart) 00:39:03: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting 00:39:03: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_connecting_enter called 00:39:03: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_restart_connecting_action called 00:39:04: dot1x-packet:Received an EAP request packet from EAP for mac 001d.927f.3fcb 00:39:04: dot1x-sm:Posting RX_REQ on Client=16EC5E0 00:39:04: dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax) 00:39:04: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating 00:39:04: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_authenticating_enter called 00:39:04: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_connecting_authenticating_action called 00:39:04: dot1x-sm:Posting AUTH_START on Client=16EC5E0 00:39:04: dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart) 00:39:04: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request 00:39:04: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_request_enter called 00:39:04: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 data: 00:39:04: dot1x-ev:FastEthernet0/1:Sending EAPOL packet to group PAE address 00:39:04: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/1. 00:39:04: dot1x-registry:registry:dot1x_ether_macaddr called 00:39:04: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/1 00:39:04: EAPOL pak dump Tx 00:39:04: EAPOL Version: 0x2 type: 0x0 length: 0x0005 00:39:04: EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 00:39:04: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (001d.927f.3fcb) 00:39:04: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_idle_request_action called 00:39:35: dot1x-packet:Received an EAP request packet from EAP for mac 001d.927f.3fcb 00:39:35: dot1x-sm:Posting EAP_REQ on Client=16EC5E0 00:39:35: dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq) 00:39:35: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request 00:39:35: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_request_request_action called 00:39:35: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_request_enter called 00:39:35: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 data: 00:39:35: dot1x-ev:FastEthernet0/1:Sending EAPOL packet to group PAE address 00:39:35: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/1. 00:39:35: dot1x-registry:registry:dot1x_ether_macaddr called 00:39:35: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/1 00:39:35: EAPOL pak dump Tx 00:39:35: EAPOL Version: 0x2 type: 0x0 length: 0x0005 00:39:35: EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 00:39:35: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (001d.927f.3fcb) Switch# 00:40:06: dot1x-packet:Received an EAP request packet from EAP for mac 001d.927f.3fcb 00:40:06: dot1x-sm:Posting EAP_REQ on Client=16EC5E0 00:40:06: dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq) 00:40:06: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request 00:40:06: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_request_request_action called 00:40:06: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_request_enter called 00:40:06: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 data: 00:40:06: dot1x-ev:FastEthernet0/1:Sending EAPOL packet to group PAE address 00:40:06: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/1. 00:40:06: dot1x-registry:registry:dot1x_ether_macaddr called 00:40:06: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/1 00:40:06: EAPOL pak dump Tx 00:40:06: EAPOL Version: 0x2 type: 0x0 length: 0x0005 00:40:06: EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 00:40:06: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (001d.927f.3fcb) 00:40:36: dot1x-ev:Received an EAP Timeout on FastEthernet0/1 for mac 001d.927f.3fcb 00:40:36: dot1x-sm:Posting EAP_TIMEOUT on Client=16EC5E0 00:40:36: dot1x_auth_bend Fa0: during state auth_bend_request, got event 12(eapTimeout) 00:40:36: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_timeout 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_timeout_enter called 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_request_timeout_action called 00:40:36: dot1x_auth_bend Fa0: idle during state auth_bend_timeout 00:40:36: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_bend_idle_enter called 00:40:36: dot1x-sm:Posting AUTH_TIMEOUT on Client=16EC5E0 00:40:36: dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout) 00:40:36: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_authenticating_exit called 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_fallback_enter called 00:40:36: dot1x-sm:Posting AUTH_FAIL on Client=16EC5E0 00:40:36: dot1x_auth Fa0: during state auth_fallback, got event 15(authFail) 00:40:36: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_authc_result_enter called 00:40:36: dot1x-sm:Posting AUTHC_FAIL on Client=16EC5E0 00:40:36: dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail) 00:40:36: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held 00:40:36: dot1x-sm:Posting RESTART on Client=16EC5E0 00:40:36: dot1x_auth Fa0: during state auth_held, got event 13(restart) 00:40:36: @@@ dot1x_auth Fa0: auth_held -> auth_restart 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_held_exit called 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_restart_enter called 00:40:36: dot1x-ev:Resetting the client 001d.927f.3fcb 00:40:36: dot1x-sm:Posting !EAP_RESTART on Client=16EC5E0 00:40:36: dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart) 00:40:36: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_connecting_enter called 00:40:36: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_restart_connecting_action called 00:40:38: dot1x-packet:Received an EAP request packet from EAP for mac 001d.927f.3fcb 00:40:38: dot1x-sm:Posting REAUTH_MAX on Client=16EC5E0 00:40:38: dot1x_auth Fa0: during state auth_connecting, got event 11(reAuthMax) 00:40:38: @@@ dot1x_auth Fa0: auth_connecting -> auth_disconnected 00:40:38: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_disconnected_enter called 00:40:38: dot1x-sm:Fa0/1:001d.927f.3fcb:auth_disconnected_enter sending canned failure to version 1 supplicant 00:40:38: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x4 id: 0x3 length: 0x0004 type: 0x0 data: 00:40:38: dot1x-ev:FastEthernet0/1:Sending EAPOL packet to group PAE address 00:40:38: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/1. 00:40:38: dot1x-registry:registry:dot1x_ether_macaddr called 00:40:38: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/1 00:40:38: EAPOL pak dump Tx 00:40:38: EAPOL Version: 0x2 type: 0x0 length: 0x0004 00:40:38: EAP code: 0x4 id: 0x3 length: 0x0004 00:40:38: dot1x-packet:dot1x_auth_txCannedFail: EAPOL packet sent to client (001d.927f.3fcb) 00:40:38: dot1x_auth Fa0: idle during state auth_disconnected 00:40:38: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart 00:40:38: dot1x-ev:dot1x_switch_port_unauthorized: Unauthorizing interface FastEthernet0/1 00:40:38: dot1x-ev:dot1x_switch_is_dot1x_forwarding_enabled: Forwarding is disabled on Fa0/1 00:40:38: dot1x-ev:dot1x_vlan_assign_client_deleted on interface FastEthernet0/1 00:40:38: dot1x_auth Fa0: initial state auth_initialize has enter 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_initialize_enter called 00:40:38: dot1x_auth Fa0: during state auth_initialize, got event 0(cfg_auto) 00:40:38: @@@ dot1x_auth Fa0: auth_initialize -> auth_disconnected 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_disconnected_enter called 00:40:38: dot1x_auth Fa0: idle during state auth_disconnected 00:40:38: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_restart_enter called 00:40:38: dot1x-ev:Sending create new context event to EAP for 0000.0000.0000 00:40:38: dot1x_auth_bend Fa0: initial state auth_bend_initialize has enter 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_bend_initialize_enter called 00:40:38: dot1x_auth_bend Fa0: initial state auth_bend_initialize has idle 00:40:38: dot1x_auth_bend Fa0: during state auth_bend_initialize, got event 16383(idle) 00:40:38: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_bend_idle_enter called 00:40:38: dot1x-ev:Created a client entry for the supplicant 0000.0000.0000 00:40:38: dot1x-ev:Created a default authenticator instance on FastEthernet0/1 00:40:38: dot1x-sm:Posting !EAP_RESTART on Client=16EC5E0 00:40:38: dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart) 00:40:38: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_connecting_enter called 00:40:38: dot1x-sm:Fa0/1:0000.0000.0000:auth_restart_connecting_action called 00:40:39: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000 00:40:39: dot1x-sm:Posting RX_REQ on Client=16EC5E0 00:40:39: dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax) 00:40:39: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating 00:40:39: dot1x-sm:Fa0/1:0000.0000.0000:auth_authenticating_enter called 00:40:39: dot1x-sm:Fa0/1:0000.0000.0000:auth_connecting_authenticating_action called 00:40:39: dot1x-sm:Posting AUTH_START on Client=16EC5E0 00:40:39: dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart) 00:40:39: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request 00:40:39: dot1x-sm:Fa0/1:0000.0000.0000:auth_bend_request_enter called 00:40:39: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1 id: 0x2 length: 0x0005 type: 0x1 data: 00:40:39: dot1x-ev:FastEthernet0/1:Sending EAPOL packet to group PAE address 00:40:39: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/1. 00:40:39: dot1x-registry:registry:dot1x_ether_macaddr called 00:40:39: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/1 00:40:39: EAPOL pak dump Tx 00:40:39: EAPOL Ver Hi can anyone help me to configure to use dot1x authentication method for my cisco 2960 switch. I am trying to use microsoft IAS as a radius server. i configured certificate cervices also and clients & computers are getting certificates. i configured also my switch to use dot1x authentication as aaa new-model aaa authentication dot1x default group radius interface f0/1 switchport mode access dot1x system-auth-control radius-server host 10.0.0.110 auth-port 1645 acct-port 1646 key **** interface f0/1 dot1x port-control auto but still my computer cannot connect to the switch i debug dot1x all and i got the result which i have attached with this message.