Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

802.1x Windows 2012 IAS

Hello I´m trying to setup 802.1x on an old 3560 switch.

The Switch is a:

Switch   Ports  Model              SW Version              SW Image

------   -----  -----              ----------              ----------

*    1   52     WS-C3560-48TS      12.2(25)SEE3            C3560-ADVIPSERVICESK

I´m using Windows 2012 IAS as RADIUS with the following policies:

Capture1.PNG

Capture2.PNG

Capture3.PNG

I have the folling config on the switch:

aaa group server radius RadiusAuth

server 172.29.8.12 auth-port 1645 acct-port 1646

!

aaa authentication login default local

aaa authentication login local enable

aaa authentication dot1x default group RadiusAuth

aaa authorization network default group RadiusAuth

dot1x system-auth-control

interface FastEthernet0/31

description 802.1x tests

switchport mode access

dot1x pae authenticator

dot1x port-control auto

dot1x timeout quiet-period 3

dot1x timeout tx-period 5

dot1x guest-vlan 106

spanning-tree portfast

!

radius-server host 172.29.8.12 auth-port 1645 acct-port 1646

radius-server retry method reorder

radius-server transaction max-tries 10

radius-server timeout 4

radius-server deadtime 2

radius-server key KEYSECRET

radius-server vsa send authentication

And I cant authenticate , I think it is a RADIUS problem.

I have this aditional debug info related with RADIUS and Dot1x:

004898: Aug  5 12:32:28: %LINK-3-UPDOWN: Interface FastEthernet0/31, changed state to down

004899: 7w6d: RADIUS(00000019): Storing nasport 50031 in rad_db

004900: 7w6d: RADIUS(00000019): Config NAS IP: 0.0.0.0

004901: 7w6d: RADIUS/ENCODE(00000019): acct_session_id: 27787264

004902: 7w6d: RADIUS(00000019): sending

004903: 7w6d: RADIUS/ENCODE: Best Local IP-Address 172.29.11.1 for Radius-Server 172.29.8.12

004904: 7w6d: RADIUS(00000019): Send Access-Request to 172.29.8.12:1645 id 21645/77, len 173

004905: 7w6d: RADIUS:  authenticator A7 3A 07 F8 8D 5B C1 76 - 67 8E 66 54 05 04 0C DB

004906: 7w6d: RADIUS:  User-Name           [1]   19  "DOMAIN\User"

004907: 7w6d: RADIUS:  Service-Type        [6]   6   Framed                    [2]

004908: 7w6d: RADIUS:  Framed-MTU          [12]  6   1500

004909: 7w6d: RADIUS:  Called-Station-Id   [30]  19  "00-17-94-97-D9-23"

004910: 7w6d: RADIUS:  Calling-Station-Id  [31]  19  "00-24-BE-C7-09-6F"

004911: 7w6d: RADIUS:  EAP-Message         [79]  24

004912: 7w6d: RADIUS:   02 02 00 16 01 44 49 47 49 54 41 49 4E 45 52 5C  [?????DOMAIN\]

004913: 7w6d: RADIUS:   6F 6C 6F 70 65 7A                                [USER]

004914: 7w6d: RADIUS:  Message-Authenticato[80]  18

004915: 7w6d: RADIUS:   31 C9 68 BA B8 E9 DC 78 6E 87 7E A4 89 D5 0C 81  [1?h????xn?~?????]

004916: 7w6d: RADIUS:  Vendor, Cisco       [26]  24

004917: 7w6d: RADIUS:   cisco-nas-port     [2]   18  "FastEthernet0/31"

004918: 7w6d: RADIUS:  NAS-Port            [5]   6   50031

004919: 7w6d: RADIUS:  NAS-Port-Type       [61]  6   Eth                       [15]

004920: 7w6d: RADIUS:  NAS-IP-Address      [4]   6   172.29.11.1

004921: Aug  5 12:32:32: %LINK-3-UPDOWN: Interface FastEthernet0/31, changed state to up

004922: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004923: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004924: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004925: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004926: 7w6d: RADIUS(00000019): Storing nasport 50031 in rad_db

004927: 7w6d: RADIUS(00000019): Config NAS IP: 0.0.0.0

004928: 7w6d: RADIUS/ENCODE(00000019): acct_session_id: 27787264

004929: 7w6d: RADIUS(00000019): sending

004930: 7w6d: RADIUS/ENCODE: Best Local IP-Address 172.29.11.1 for Radius-Server 172.29.8.12

004931: 7w6d: RADIUS(00000019): Send Access-Request to 172.29.8.12:1645 id 21645/78, len 173

004932: 7w6d: RADIUS:  authenticator 84 B1 75 9D 4C 21 0F 9D - 19 01 A6 23 DE 1B 74 1A

004933: 7w6d: RADIUS:  User-Name           [1]   19  "DOMAIN\User"

004934: 7w6d: RADIUS:  Service-Type        [6]   6   Framed                    [2]

004935: 7w6d: RADIUS:  Framed-MTU          [12]  6   1500

004936: 7w6d: RADIUS:  Called-Station-Id   [30]  19  "00-17-94-97-D9-23"

004937: 7w6d: RADIUS:  Calling-Station-Id  [31]  19  "00-24-BE-C7-09-6F"

004938: 7w6d: RADIUS:  EAP-Message         [79]  24

004939: 7w6d: RADIUS:   02 03 00 16 01 44 49 47 49 54 41 49 4E 45 52 5C  [?????DDOMAIN\]

004940: 7w6d: RADIUS:   6F 6C 6F 70 65 7A                                [User]

004941: 7w6d: RADIUS:  Message-Authenticato[80]  18

004942: 7w6d: RADIUS:   D3 1E DC 03 5E 13 CF 93 6B 7F F4 B8 DB 20 65 A6  [????^???k???? e?]

004943: 7w6d: RADIUS:  Vendor, Cisco       [26]  24

004944: 7w6d: RADIUS:   cisco-nas-port     [2]   18  "FastEthernet0/31"

004945: 7w6d: RADIUS:  NAS-Port            [5]   6   50031

004946: 7w6d: RADIUS:  NAS-Port-Type       [61]  6   Eth                       [15]

004947: 7w6d: RADIUS:  NAS-IP-Address      [4]   6   172.29.11.1

004948: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004949: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004950: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004951: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004952: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004953: Aug  5 12:33:04: %RADIUS-4-RADIUS_DEAD: RADIUS server 172.29.8.12:1645,1646 is not responding.

004954: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004955: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004956: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004957: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004958: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004959: 7w6d: RADIUS: No response from (172.29.8.12:1645,1646) for id 21645/77

004960: 7w6d: RADIUS/DECODE: parse response no app start; FAIL

004961: 7w6d: RADIUS/DECODE: parse response; FAIL

004962: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004963: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004964: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004965: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004966: 7w6d: RADIUS: No response from (172.29.8.12:1645,1646) for id 21645/78

004967: 7w6d: RADIUS/DECODE: parse response no app start; FAIL

004968: 7w6d: RADIUS/DECODE: parse response; FAIL

004969: Aug  5 12:35:04: %RADIUS-4-RADIUS_ALIVE: RADIUS server 172.29.8.12:1645,1646 has returned.

----------------------------

DOT1X

---------------

005294: 7w6d: dot1x-ev:dot1x_switch_is_dot1x_forwarding_enabled: Forwarding is disabled on Fa0/31

005295: 7w6d: dot1x-registry:dot1x_switch_port_linkcomingup invoked on interface Fa0/31

005296: 7w6d: dot1x-ev:dot1x_mgr_if_state_change: FastEthernet0/31 has changed to UP

005297: 7w6d:     dot1x_auth Fa0: initial state auth_initialize has enter

005298: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_initialize_enter called

005299: 7w6d:     dot1x_auth Fa0: during state auth_initialize, got event 0(cfg_auto)

005300: 7w6d: @@@ dot1x_auth Fa0: auth_initialize -> auth_disconnected

005301: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_disconnected_enter called

005302: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005303: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005304: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005305: 7w6d: dot1x-ev:Sending create new context event to EAP for 0000.0000.0000

005306: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has enter

005307: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_initialize_enter called

005308: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has idle

005309: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_initialize, got event 16383(idle)

005310: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle

005311: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005312: 7w6d: dot1x-ev:Created a client entry for the supplicant 0000.0000.0000

005313: 7w6d: dot1x-ev:Created a default authenticator instance on FastEthernet0/31

005314: 7w6d: dot1x-ev:dot1x_switch_enable_on_port:  Enabling dot1x on interface FastEthernet0/31

005315: 7w6d: dot1x-ev:dot1x_switch_enable_on_port: set dot1x ask handler on interface FastEthernet0/31

005316: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005317: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005318: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005319: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005320: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005321: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005322: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005323: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005324: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005325: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005326: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005327: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005328: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005329: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005330: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005331: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005332: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005333: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005334: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005335: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005336: 7w6d: EAPOL pak dump Tx

005337: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005338: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005339: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005340: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005341: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005342: 7w6d: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q

005343: 7w6d: dot1x-ev:Enqueued the eapol packet to the global authenticator queue

005344: 7w6d: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/31

005345: 7w6d: dot1x-ev:Received pkt saddr =0024.bec7.096f , daddr = 0180.c200.0003,

                    pae-ether-type = 888e.0100.0016

005346: 7w6d: dot1x-ev:Created a client entry for the supplicant 0024.bec7.096f

005347: 7w6d: dot1x-ev:Found the default authenticator instance on FastEthernet0/31

005348: 7w6d: dot1x-registry:EAPOL traffic seen on FastEthernet0/31

005349: 7w6d: dot1x-packet:Received an EAP packet on interface FastEthernet0/31

005350: 7w6d: EAPOL pak dump rx

005351: 7w6d: EAPOL Version: 0x1  type: 0x0  length: 0x0016

005352: 7w6d: dot1x-packet:Received an EAP packet on the FastEthernet0/31 from mac 0024.bec7.096f

005353: 7w6d: dot1x-sm:Posting EAPOL_EAP on Client=39E7F78

005354: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 6(eapolEap)

005355: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_response

005356: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_enter called

005357: 7w6d: dot1x-ev:dot1x_sendRespToServer: Response sent to the server from 0024.bec7.096f

005358: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_request_response_action called

005359: Aug  5 12:39:28: %LINK-3-UPDOWN: Interface FastEthernet0/31, changed state to up

005360: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005361: 7w6d: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q

005362: 7w6d: dot1x-ev:Enqueued the eapol packet to the global authenticator queue

005363: 7w6d: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/31

005364: 7w6d: dot1x-ev:Received pkt saddr =0024.bec7.096f , daddr = 0180.c200.0003,

                    pae-ether-type = 888e.0101.0000

005365: 7w6d: dot1x-packet:Received an EAPOL-Start packet on interface FastEthernet0/31

005366: 7w6d: EAPOL pak dump rx

005367: 7w6d: EAPOL Version: 0x1  type: 0x1  length: 0x0000

005368: 7w6d: dot1x-sm:Posting EAPOL_START on Client=39E7F78

005369: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 4(eapolStart)

005370: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_aborting

005371: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authenticating_exit called

005372: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_aborting_enter called

005373: 7w6d: dot1x-sm:Posting AUTH_ABORT on Client=39E7F78

005374: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_response, got event 1(authAbort)

005375: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_response -> auth_bend_initialize

005376: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_exit called

005377: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_initialize_enter called

005378: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_initialize

005379: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle

005380: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_idle_enter called

005381: 7w6d: dot1x-sm:Posting !AUTH_ABORT on Client=39E7F78

005382: 7w6d:     dot1x_auth Fa0: during state auth_aborting, got event 20(no_eapolLogoff_no_authAbort)

005383: 7w6d: @@@ dot1x_auth Fa0: auth_aborting -> auth_restart

005384: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_aborting_exit called

005385: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_enter called

005386: 7w6d: dot1x-ev:Resetting the client 0024.bec7.096f

005387: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_aborting_restart_action called

005388: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005389: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005390: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005391: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_connecting_enter called

005392: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_connecting_action called

005393: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0024.bec7.096f

005394: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005395: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005396: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005397: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authenticating_enter called

005398: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_connecting_authenticating_action called

005399: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005400: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005401: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005402: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_request_enter called

005403: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005404: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005405: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005406: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005407: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005408: 7w6d: EAPOL pak dump Tx

005409: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005410: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005411: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (0024.bec7.096f)

005412: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_idle_request_action called

005413: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005414: 7w6d: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q

005415: 7w6d: dot1x-ev:Enqueued the eapol packet to the global authenticator queue

005416: 7w6d: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/31

005417: 7w6d: dot1x-ev:Received pkt saddr =0024.bec7.096f , daddr = 0180.c200.0003,

                    pae-ether-type = 888e.0100.0016

005418: 7w6d: dot1x-packet:Received an EAP packet on interface FastEthernet0/31

005419: 7w6d: EAPOL pak dump rx

005420: 7w6d: EAPOL Version: 0x1  type: 0x0  length: 0x0016

005421: 7w6d: dot1x-packet:Received an EAP packet on the FastEthernet0/31 from mac 0024.bec7.096f

005422: 7w6d: dot1x-sm:Posting EAPOL_EAP on Client=39E7F78

005423: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 6(eapolEap)

005424: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_response

005425: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_enter called

005426: 7w6d: dot1x-ev:dot1x_sendRespToServer: Response sent to the server from 0024.bec7.096f

005427: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_request_response_action called

005428: 7w6d: dot1x-sm:Posting A_WHILE_EXPIRE on Client=39E7F78

005429: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_response, got event 9(aWhile_expire)

005430: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_response -> auth_bend_timeout

005431: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_exit called

005432: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_timeout_enter called

005433: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_timeout_action called

005434: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_timeout

005435: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle

005436: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_idle_enter called

005437: 7w6d: dot1x-sm:Posting AUTH_TIMEOUT on Client=39E7F78

005438: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout)

005439: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback

005440: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authenticating_exit called

005441: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_fallback_enter called

005442: 7w6d: dot1x-sm:Posting AUTH_FAIL on Client=39E7F78

005443: 7w6d:     dot1x_auth Fa0: during state auth_fallback, got event 15(authFail)

005444: 7w6d: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result

005445: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authc_result_enter called

005446: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005447: 7w6d: dot1x-sm:Posting AUTHC_FAIL on Client=39E7F78

005448: 7w6d:     dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail)

005449: 7w6d: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held

005450: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005451: 7w6d: dot1x-sm:Posting RESTART on Client=39E7F78

005452: 7w6d:     dot1x_auth Fa0: during state auth_held, got event 13(restart)

005453: 7w6d: @@@ dot1x_auth Fa0: auth_held -> auth_restart

005454: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_held_exit called

005455: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_enter called

005456: 7w6d: dot1x-ev:Resetting the client 0024.bec7.096f

005457: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005458: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005459: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005460: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_connecting_enter called

005461: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_connecting_action called

005462: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0024.bec7.096f

005463: 7w6d: dot1x-sm:Posting REAUTH_MAX on Client=39E7F78

005464: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 11(reAuthMax)

005465: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_disconnected

005466: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_disconnected_enter called

005467: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_disconnected_enter sending canned failure to version 1 supplicant

005468: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x4  id: 0x4  length: 0x0004 type: 0x0  data:

005469: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005470: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005471: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005472: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005473: 7w6d: EAPOL pak dump Tx

005474: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0004

005475: 7w6d: EAP code: 0x4  id: 0x4  length: 0x0004

005476: 7w6d: dot1x-packet:dot1x_auth_txCannedFail: EAPOL packet sent to client (0024.bec7.096f)

005477: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005478: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005479: 7w6d: dot1x-ev:dot1x_switch_port_unauthorized: Unauthorizing interface FastEthernet0/31

005480: 7w6d: dot1x-ev:dot1x_switch_is_dot1x_forwarding_enabled: Forwarding is disabled on Fa0/31

005481: 7w6d: dot1x-ev:dot1x_vlan_assign_client_deleted on interface FastEthernet0/31

005482: 7w6d:     dot1x_auth Fa0: initial state auth_initialize has enter

005483: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_initialize_enter called

005484: 7w6d:     dot1x_auth Fa0: during state auth_initialize, got event 0(cfg_auto)

005485: 7w6d: @@@ dot1x_auth Fa0: auth_initialize -> auth_disconnected

005486: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_disconnected_enter called

005487: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005488: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005489: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005490: 7w6d: dot1x-ev:Sending create new context event to EAP for 0000.0000.0000

005491: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has enter

005492: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_initialize_enter called

005493: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has idle

005494: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_initialize, got event 16383(idle)

005495: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle

005496: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005497: 7w6d: dot1x-ev:Created a client entry for the supplicant 0000.0000.0000

005498: 7w6d: dot1x-ev:Created a default authenticator instance on FastEthernet0/31

005499: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005500: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005501: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005502: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005503: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005504: Aug  5 12:40:17: %RADIUS-4-RADIUS_ALIVE: RADIUS server 172.29.8.12:1645,1646 has returned.

005505: 7w6d: dot1x-ev:dot1x_critical_active_state_change: Critical Auth Active state changed to FALSE

005506: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005507: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005508: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005509: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005510: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005511: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005512: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005513: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005514: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005515: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005516: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005517: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005518: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005519: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005520: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005521: 7w6d: EAPOL pak dump Tx

005522: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005523: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005524: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005525: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005526: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005527: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005528: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005529: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005530: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005531: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005532: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005533: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005534: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005535: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005536: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005537: 7w6d: EAPOL pak dump Tx

005538: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005539: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005540: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005541: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005542: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005543: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005544: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005545: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005546: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005547: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005548: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005549: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005550: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005551: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005552: 7w6d: EAPOL pak dump Tx

005553: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005554: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005555: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005556: 7w6d: dot1x-ev:Received an EAP Timeout on FastEthernet0/31 for mac 0000.0000.0000

005557: 7w6d: dot1x-sm:Posting EAP_TIMEOUT on Client=39E7F78

005558: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 12(eapTimeout)

005559: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_timeout

005560: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_timeout_enter called

005561: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_timeout_action called

005562: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_timeout

005563: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle

005564: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005565: 7w6d: dot1x-sm:Posting AUTH_TIMEOUT on Client=39E7F78

005566: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout)

005567: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback

005568: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_exit called

005569: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_fallback_enter called

005570: 7w6d: dot1x-sm:Posting AUTH_FAIL on Client=39E7F78

005571: 7w6d:     dot1x_auth Fa0: during state auth_fallback, got event 15(authFail)

005572: 7w6d: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result

005573: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authc_result_enter called

005574: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005575: 7w6d: dot1x-sm:Posting AUTHC_FAIL on Client=39E7F78

005576: 7w6d:     dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail)

005577: 7w6d: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held

005578: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005579: 7w6d: dot1x-sm:Posting RESTART on Client=39E7F78

005580: 7w6d:     dot1x_auth Fa0: during state auth_held, got event 13(restart)

005581: 7w6d: @@@ dot1x_auth Fa0: auth_held -> auth_restart

005582: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_held_exit called

005583: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005584: 7w6d: dot1x-ev:Resetting the client 0000.0000.0000

005585: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005586: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005587: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005588: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005589: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005590: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005591: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005592: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005593: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005594: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005595: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005596: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005597: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005598: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005599: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005600: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005601: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005602: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005603: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005604: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005605: 7w6d: EAPOL pak dump Tx

005606: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005607: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005608: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005609: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005610: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005611: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005612: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005613: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005614: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005615: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005616: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005617: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005618: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005619: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005620: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005621: 7w6d: EAPOL pak dump Tx

005622: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005623: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005624: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005625: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005626: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005627: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005628: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005629: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005630: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005631: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005632: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005633: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005634: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005635: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005636: 7w6d: EAPOL pak dump Tx

005637: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005638: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005639: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005640: 7w6d: dot1x-ev:Received an EAP Timeout on FastEthernet0/31 for mac 0000.0000.0000

005641: 7w6d: dot1x-sm:Posting EAP_TIMEOUT on Client=39E7F78

005642: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 12(eapTimeout)

005643: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_timeout

005644: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_timeout_enter called

005645: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_timeout_action called

005646: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_timeout

005647: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle

005648: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005649: 7w6d: dot1x-sm:Posting AUTH_TIMEOUT on Client=39E7F78

005650: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout)

005651: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback

005652: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_exit called

005653: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_fallback_enter called

005654: 7w6d: dot1x-sm:Posting AUTH_FAIL on Client=39E7F78

005655: 7w6d:     dot1x_auth Fa0: during state auth_fallback, got event 15(authFail)

005656: 7w6d: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result

005657: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authc_result_enter called

005658: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005659: 7w6d: dot1x-sm:Posting AUTHC_FAIL on Client=39E7F78

005660: 7w6d:     dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail)

005661: 7w6d: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held

005662: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005663: 7w6d: dot1x-sm:Posting RESTART on Client=39E7F78

005664: 7w6d:     dot1x_auth Fa0: during state auth_held, got event 13(restart)

005665: 7w6d: @@@ dot1x_auth Fa0: auth_held -> auth_restart

005666: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_held_exit called

005667: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005668: 7w6d: dot1x-ev:Resetting the client 0000.0000.0000

005669: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005670: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005671: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005672: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005673: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005674: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005675: 7w6d: dot1x-sm:Posting REAUTH_MAX on Client=39E7F78

005676: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 11(reAuthMax)

005677: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_disconnected

005678: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_disconnected_enter called

005679: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005680: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005681: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005682: 7w6d: dot1x-ev:Resetting the client 0000.0000.0000

005683: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005684: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005685: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005686: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005687: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005688: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005689: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005690: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005691: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005692: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005693: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005694: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005695: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005696: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005697: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005698: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1  data:

005699: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005700: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005701: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005702: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005703: 7w6d: EAPOL pak dump Tx

005704: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005705: 7w6d: EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1

005706: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005707: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005708: 7w6d: dot1x-registry:dot1x_switch_port_physical_linkchange invoked on interface Fa0/31

005709: 7w6d: dot1x-ev:dot1x_mgr_if_state_change: FastEthernet0/31 has changed to DOWN

005710: 7w6d: dot1x-ev:Cleared all authenticator instances on FastEthernet0/31

Dot1x Info for FastEthernet0/31

-----------------------------------

PAE                       = AUTHENTICATOR

PortControl               = AUTO

ControlDirection          = Both

HostMode                  = SINGLE_HOST

ReAuthentication          = Disabled

QuietPeriod               = 3

ServerTimeout             = 30

SuppTimeout               = 30

ReAuthPeriod              = 3600 (Locally configured)

ReAuthMax                 = 2

MaxReq                    = 2

TxPeriod                  = 5

RateLimitPeriod           = 0

Guest-Vlan                = 106

Any idea? thanks in advance.

Everyone's tags (3)
1 REPLY

802.1x Windows 2012 IAS

Did you try "Unencrypted authentication (PAP, SPAP)" tick in Network Policies?

It's probably going to solve your problem

1016
Views
0
Helpful
1
Replies
CreatePlease to create content