Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

7960 Phones going into Err-disable state with 802.1X

We have have a few instances of dot1x ports getting a err-disable with the offending mac being the phone MAC. Since the port is in single host mode that is the default behavior. It would appear its something with the phone bleeding packets from the voice VLAN onto the data VLAN untagged. Anyone else seen this and how did it get resolved?

2 REPLIES
Cisco Employee

Re: 7960 Phones going into Err-disable state with 802.1X

Could you please paste the exact error that you are getting. I would like to see the " show log" from the switch.

-amit singh

Community Member

Re: 7960 Phones going into Err-disable state with 802.1X

The offending MAC is the phone 0015.c6b7.2fdc

Mar 29 21:15:51 EST: %DOT1X-5-SECURITY_VIOLATION: Security violation on interface GigabitEthernet4/29, New MAC address 0015.c6b7.2fdc is seen on the interface in Single Host mode

Mar 29 21:15:51 EST: %PM-4-ERR_DISABLE: security-violation error detected on Gi4/29, putting Gi4/29 in err-disable state

376
Views
0
Helpful
2
Replies
CreatePlease to create content