cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1838
Views
0
Helpful
1
Replies

802.1x Windows 2012 IAS

sistemaspcsnet
Level 1
Level 1

Hello I´m trying to setup 802.1x on an old 3560 switch.

The Switch is a:

Switch   Ports  Model              SW Version              SW Image

------   -----  -----              ----------              ----------

*    1   52     WS-C3560-48TS      12.2(25)SEE3            C3560-ADVIPSERVICESK

I´m using Windows 2012 IAS as RADIUS with the following policies:

Capture1.PNG

Capture2.PNG

Capture3.PNG

I have the folling config on the switch:

aaa group server radius RadiusAuth

server 172.29.8.12 auth-port 1645 acct-port 1646

!

aaa authentication login default local

aaa authentication login local enable

aaa authentication dot1x default group RadiusAuth

aaa authorization network default group RadiusAuth

dot1x system-auth-control

interface FastEthernet0/31

description 802.1x tests

switchport mode access

dot1x pae authenticator

dot1x port-control auto

dot1x timeout quiet-period 3

dot1x timeout tx-period 5

dot1x guest-vlan 106

spanning-tree portfast

!

radius-server host 172.29.8.12 auth-port 1645 acct-port 1646

radius-server retry method reorder

radius-server transaction max-tries 10

radius-server timeout 4

radius-server deadtime 2

radius-server key KEYSECRET

radius-server vsa send authentication

And I cant authenticate , I think it is a RADIUS problem.

I have this aditional debug info related with RADIUS and Dot1x:

004898: Aug  5 12:32:28: %LINK-3-UPDOWN: Interface FastEthernet0/31, changed state to down

004899: 7w6d: RADIUS(00000019): Storing nasport 50031 in rad_db

004900: 7w6d: RADIUS(00000019): Config NAS IP: 0.0.0.0

004901: 7w6d: RADIUS/ENCODE(00000019): acct_session_id: 27787264

004902: 7w6d: RADIUS(00000019): sending

004903: 7w6d: RADIUS/ENCODE: Best Local IP-Address 172.29.11.1 for Radius-Server 172.29.8.12

004904: 7w6d: RADIUS(00000019): Send Access-Request to 172.29.8.12:1645 id 21645/77, len 173

004905: 7w6d: RADIUS:  authenticator A7 3A 07 F8 8D 5B C1 76 - 67 8E 66 54 05 04 0C DB

004906: 7w6d: RADIUS:  User-Name           [1]   19  "DOMAIN\User"

004907: 7w6d: RADIUS:  Service-Type        [6]   6   Framed                    [2]

004908: 7w6d: RADIUS:  Framed-MTU          [12]  6   1500

004909: 7w6d: RADIUS:  Called-Station-Id   [30]  19  "00-17-94-97-D9-23"

004910: 7w6d: RADIUS:  Calling-Station-Id  [31]  19  "00-24-BE-C7-09-6F"

004911: 7w6d: RADIUS:  EAP-Message         [79]  24

004912: 7w6d: RADIUS:   02 02 00 16 01 44 49 47 49 54 41 49 4E 45 52 5C  [?????DOMAIN\]

004913: 7w6d: RADIUS:   6F 6C 6F 70 65 7A                                [USER]

004914: 7w6d: RADIUS:  Message-Authenticato[80]  18

004915: 7w6d: RADIUS:   31 C9 68 BA B8 E9 DC 78 6E 87 7E A4 89 D5 0C 81  [1?h????xn?~?????]

004916: 7w6d: RADIUS:  Vendor, Cisco       [26]  24

004917: 7w6d: RADIUS:   cisco-nas-port     [2]   18  "FastEthernet0/31"

004918: 7w6d: RADIUS:  NAS-Port            [5]   6   50031

004919: 7w6d: RADIUS:  NAS-Port-Type       [61]  6   Eth                       [15]

004920: 7w6d: RADIUS:  NAS-IP-Address      [4]   6   172.29.11.1

004921: Aug  5 12:32:32: %LINK-3-UPDOWN: Interface FastEthernet0/31, changed state to up

004922: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004923: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004924: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004925: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004926: 7w6d: RADIUS(00000019): Storing nasport 50031 in rad_db

004927: 7w6d: RADIUS(00000019): Config NAS IP: 0.0.0.0

004928: 7w6d: RADIUS/ENCODE(00000019): acct_session_id: 27787264

004929: 7w6d: RADIUS(00000019): sending

004930: 7w6d: RADIUS/ENCODE: Best Local IP-Address 172.29.11.1 for Radius-Server 172.29.8.12

004931: 7w6d: RADIUS(00000019): Send Access-Request to 172.29.8.12:1645 id 21645/78, len 173

004932: 7w6d: RADIUS:  authenticator 84 B1 75 9D 4C 21 0F 9D - 19 01 A6 23 DE 1B 74 1A

004933: 7w6d: RADIUS:  User-Name           [1]   19  "DOMAIN\User"

004934: 7w6d: RADIUS:  Service-Type        [6]   6   Framed                    [2]

004935: 7w6d: RADIUS:  Framed-MTU          [12]  6   1500

004936: 7w6d: RADIUS:  Called-Station-Id   [30]  19  "00-17-94-97-D9-23"

004937: 7w6d: RADIUS:  Calling-Station-Id  [31]  19  "00-24-BE-C7-09-6F"

004938: 7w6d: RADIUS:  EAP-Message         [79]  24

004939: 7w6d: RADIUS:   02 03 00 16 01 44 49 47 49 54 41 49 4E 45 52 5C  [?????DDOMAIN\]

004940: 7w6d: RADIUS:   6F 6C 6F 70 65 7A                                [User]

004941: 7w6d: RADIUS:  Message-Authenticato[80]  18

004942: 7w6d: RADIUS:   D3 1E DC 03 5E 13 CF 93 6B 7F F4 B8 DB 20 65 A6  [????^???k???? e?]

004943: 7w6d: RADIUS:  Vendor, Cisco       [26]  24

004944: 7w6d: RADIUS:   cisco-nas-port     [2]   18  "FastEthernet0/31"

004945: 7w6d: RADIUS:  NAS-Port            [5]   6   50031

004946: 7w6d: RADIUS:  NAS-Port-Type       [61]  6   Eth                       [15]

004947: 7w6d: RADIUS:  NAS-IP-Address      [4]   6   172.29.11.1

004948: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004949: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004950: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004951: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004952: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004953: Aug  5 12:33:04: %RADIUS-4-RADIUS_DEAD: RADIUS server 172.29.8.12:1645,1646 is not responding.

004954: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004955: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004956: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004957: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/77

004958: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004959: 7w6d: RADIUS: No response from (172.29.8.12:1645,1646) for id 21645/77

004960: 7w6d: RADIUS/DECODE: parse response no app start; FAIL

004961: 7w6d: RADIUS/DECODE: parse response; FAIL

004962: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004963: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004964: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004965: 7w6d: RADIUS: Retransmit to (172.29.8.12:1645,1646) for id 21645/78

004966: 7w6d: RADIUS: No response from (172.29.8.12:1645,1646) for id 21645/78

004967: 7w6d: RADIUS/DECODE: parse response no app start; FAIL

004968: 7w6d: RADIUS/DECODE: parse response; FAIL

004969: Aug  5 12:35:04: %RADIUS-4-RADIUS_ALIVE: RADIUS server 172.29.8.12:1645,1646 has returned.

----------------------------

DOT1X

---------------

005294: 7w6d: dot1x-ev:dot1x_switch_is_dot1x_forwarding_enabled: Forwarding is disabled on Fa0/31

005295: 7w6d: dot1x-registry:dot1x_switch_port_linkcomingup invoked on interface Fa0/31

005296: 7w6d: dot1x-ev:dot1x_mgr_if_state_change: FastEthernet0/31 has changed to UP

005297: 7w6d:     dot1x_auth Fa0: initial state auth_initialize has enter

005298: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_initialize_enter called

005299: 7w6d:     dot1x_auth Fa0: during state auth_initialize, got event 0(cfg_auto)

005300: 7w6d: @@@ dot1x_auth Fa0: auth_initialize -> auth_disconnected

005301: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_disconnected_enter called

005302: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005303: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005304: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005305: 7w6d: dot1x-ev:Sending create new context event to EAP for 0000.0000.0000

005306: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has enter

005307: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_initialize_enter called

005308: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has idle

005309: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_initialize, got event 16383(idle)

005310: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle

005311: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005312: 7w6d: dot1x-ev:Created a client entry for the supplicant 0000.0000.0000

005313: 7w6d: dot1x-ev:Created a default authenticator instance on FastEthernet0/31

005314: 7w6d: dot1x-ev:dot1x_switch_enable_on_port:  Enabling dot1x on interface FastEthernet0/31

005315: 7w6d: dot1x-ev:dot1x_switch_enable_on_port: set dot1x ask handler on interface FastEthernet0/31

005316: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005317: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005318: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005319: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005320: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005321: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005322: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005323: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005324: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005325: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005326: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005327: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005328: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005329: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005330: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005331: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005332: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005333: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005334: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005335: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005336: 7w6d: EAPOL pak dump Tx

005337: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005338: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005339: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005340: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005341: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005342: 7w6d: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q

005343: 7w6d: dot1x-ev:Enqueued the eapol packet to the global authenticator queue

005344: 7w6d: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/31

005345: 7w6d: dot1x-ev:Received pkt saddr =0024.bec7.096f , daddr = 0180.c200.0003,

                    pae-ether-type = 888e.0100.0016

005346: 7w6d: dot1x-ev:Created a client entry for the supplicant 0024.bec7.096f

005347: 7w6d: dot1x-ev:Found the default authenticator instance on FastEthernet0/31

005348: 7w6d: dot1x-registry:EAPOL traffic seen on FastEthernet0/31

005349: 7w6d: dot1x-packet:Received an EAP packet on interface FastEthernet0/31

005350: 7w6d: EAPOL pak dump rx

005351: 7w6d: EAPOL Version: 0x1  type: 0x0  length: 0x0016

005352: 7w6d: dot1x-packet:Received an EAP packet on the FastEthernet0/31 from mac 0024.bec7.096f

005353: 7w6d: dot1x-sm:Posting EAPOL_EAP on Client=39E7F78

005354: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 6(eapolEap)

005355: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_response

005356: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_enter called

005357: 7w6d: dot1x-ev:dot1x_sendRespToServer: Response sent to the server from 0024.bec7.096f

005358: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_request_response_action called

005359: Aug  5 12:39:28: %LINK-3-UPDOWN: Interface FastEthernet0/31, changed state to up

005360: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005361: 7w6d: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q

005362: 7w6d: dot1x-ev:Enqueued the eapol packet to the global authenticator queue

005363: 7w6d: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/31

005364: 7w6d: dot1x-ev:Received pkt saddr =0024.bec7.096f , daddr = 0180.c200.0003,

                    pae-ether-type = 888e.0101.0000

005365: 7w6d: dot1x-packet:Received an EAPOL-Start packet on interface FastEthernet0/31

005366: 7w6d: EAPOL pak dump rx

005367: 7w6d: EAPOL Version: 0x1  type: 0x1  length: 0x0000

005368: 7w6d: dot1x-sm:Posting EAPOL_START on Client=39E7F78

005369: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 4(eapolStart)

005370: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_aborting

005371: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authenticating_exit called

005372: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_aborting_enter called

005373: 7w6d: dot1x-sm:Posting AUTH_ABORT on Client=39E7F78

005374: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_response, got event 1(authAbort)

005375: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_response -> auth_bend_initialize

005376: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_exit called

005377: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_initialize_enter called

005378: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_initialize

005379: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle

005380: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_idle_enter called

005381: 7w6d: dot1x-sm:Posting !AUTH_ABORT on Client=39E7F78

005382: 7w6d:     dot1x_auth Fa0: during state auth_aborting, got event 20(no_eapolLogoff_no_authAbort)

005383: 7w6d: @@@ dot1x_auth Fa0: auth_aborting -> auth_restart

005384: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_aborting_exit called

005385: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_enter called

005386: 7w6d: dot1x-ev:Resetting the client 0024.bec7.096f

005387: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_aborting_restart_action called

005388: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005389: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005390: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005391: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_connecting_enter called

005392: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_connecting_action called

005393: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0024.bec7.096f

005394: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005395: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005396: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005397: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authenticating_enter called

005398: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_connecting_authenticating_action called

005399: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005400: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005401: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005402: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_request_enter called

005403: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005404: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005405: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005406: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005407: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005408: 7w6d: EAPOL pak dump Tx

005409: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005410: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005411: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (0024.bec7.096f)

005412: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_idle_request_action called

005413: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005414: 7w6d: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q

005415: 7w6d: dot1x-ev:Enqueued the eapol packet to the global authenticator queue

005416: 7w6d: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/31

005417: 7w6d: dot1x-ev:Received pkt saddr =0024.bec7.096f , daddr = 0180.c200.0003,

                    pae-ether-type = 888e.0100.0016

005418: 7w6d: dot1x-packet:Received an EAP packet on interface FastEthernet0/31

005419: 7w6d: EAPOL pak dump rx

005420: 7w6d: EAPOL Version: 0x1  type: 0x0  length: 0x0016

005421: 7w6d: dot1x-packet:Received an EAP packet on the FastEthernet0/31 from mac 0024.bec7.096f

005422: 7w6d: dot1x-sm:Posting EAPOL_EAP on Client=39E7F78

005423: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 6(eapolEap)

005424: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_response

005425: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_enter called

005426: 7w6d: dot1x-ev:dot1x_sendRespToServer: Response sent to the server from 0024.bec7.096f

005427: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_request_response_action called

005428: 7w6d: dot1x-sm:Posting A_WHILE_EXPIRE on Client=39E7F78

005429: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_response, got event 9(aWhile_expire)

005430: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_response -> auth_bend_timeout

005431: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_exit called

005432: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_timeout_enter called

005433: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_response_timeout_action called

005434: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_timeout

005435: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle

005436: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_bend_idle_enter called

005437: 7w6d: dot1x-sm:Posting AUTH_TIMEOUT on Client=39E7F78

005438: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout)

005439: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback

005440: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authenticating_exit called

005441: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_fallback_enter called

005442: 7w6d: dot1x-sm:Posting AUTH_FAIL on Client=39E7F78

005443: 7w6d:     dot1x_auth Fa0: during state auth_fallback, got event 15(authFail)

005444: 7w6d: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result

005445: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_authc_result_enter called

005446: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005447: 7w6d: dot1x-sm:Posting AUTHC_FAIL on Client=39E7F78

005448: 7w6d:     dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail)

005449: 7w6d: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held

005450: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005451: 7w6d: dot1x-sm:Posting RESTART on Client=39E7F78

005452: 7w6d:     dot1x_auth Fa0: during state auth_held, got event 13(restart)

005453: 7w6d: @@@ dot1x_auth Fa0: auth_held -> auth_restart

005454: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_held_exit called

005455: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_enter called

005456: 7w6d: dot1x-ev:Resetting the client 0024.bec7.096f

005457: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005458: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005459: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005460: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_connecting_enter called

005461: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_restart_connecting_action called

005462: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0024.bec7.096f

005463: 7w6d: dot1x-sm:Posting REAUTH_MAX on Client=39E7F78

005464: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 11(reAuthMax)

005465: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_disconnected

005466: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_disconnected_enter called

005467: 7w6d: dot1x-sm:Fa0/31:0024.bec7.096f:auth_disconnected_enter sending canned failure to version 1 supplicant

005468: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x4  id: 0x4  length: 0x0004 type: 0x0  data:

005469: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005470: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005471: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005472: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005473: 7w6d: EAPOL pak dump Tx

005474: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0004

005475: 7w6d: EAP code: 0x4  id: 0x4  length: 0x0004

005476: 7w6d: dot1x-packet:dot1x_auth_txCannedFail: EAPOL packet sent to client (0024.bec7.096f)

005477: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005478: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005479: 7w6d: dot1x-ev:dot1x_switch_port_unauthorized: Unauthorizing interface FastEthernet0/31

005480: 7w6d: dot1x-ev:dot1x_switch_is_dot1x_forwarding_enabled: Forwarding is disabled on Fa0/31

005481: 7w6d: dot1x-ev:dot1x_vlan_assign_client_deleted on interface FastEthernet0/31

005482: 7w6d:     dot1x_auth Fa0: initial state auth_initialize has enter

005483: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_initialize_enter called

005484: 7w6d:     dot1x_auth Fa0: during state auth_initialize, got event 0(cfg_auto)

005485: 7w6d: @@@ dot1x_auth Fa0: auth_initialize -> auth_disconnected

005486: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_disconnected_enter called

005487: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005488: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005489: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005490: 7w6d: dot1x-ev:Sending create new context event to EAP for 0000.0000.0000

005491: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has enter

005492: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_initialize_enter called

005493: 7w6d:     dot1x_auth_bend Fa0: initial state auth_bend_initialize has idle

005494: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_initialize, got event 16383(idle)

005495: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_initialize -> auth_bend_idle

005496: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005497: 7w6d: dot1x-ev:Created a client entry for the supplicant 0000.0000.0000

005498: 7w6d: dot1x-ev:Created a default authenticator instance on FastEthernet0/31

005499: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005500: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005501: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005502: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005503: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005504: Aug  5 12:40:17: %RADIUS-4-RADIUS_ALIVE: RADIUS server 172.29.8.12:1645,1646 has returned.

005505: 7w6d: dot1x-ev:dot1x_critical_active_state_change: Critical Auth Active state changed to FALSE

005506: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005507: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005508: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005509: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005510: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005511: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005512: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005513: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005514: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005515: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005516: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005517: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005518: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005519: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005520: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005521: 7w6d: EAPOL pak dump Tx

005522: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005523: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005524: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005525: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005526: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005527: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005528: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005529: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005530: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005531: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005532: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005533: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005534: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005535: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005536: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005537: 7w6d: EAPOL pak dump Tx

005538: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005539: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005540: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005541: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005542: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005543: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005544: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005545: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005546: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005547: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1  data:

005548: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005549: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005550: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005551: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005552: 7w6d: EAPOL pak dump Tx

005553: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005554: 7w6d: EAP code: 0x1  id: 0x2  length: 0x0005 type: 0x1

005555: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005556: 7w6d: dot1x-ev:Received an EAP Timeout on FastEthernet0/31 for mac 0000.0000.0000

005557: 7w6d: dot1x-sm:Posting EAP_TIMEOUT on Client=39E7F78

005558: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 12(eapTimeout)

005559: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_timeout

005560: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_timeout_enter called

005561: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_timeout_action called

005562: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_timeout

005563: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle

005564: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005565: 7w6d: dot1x-sm:Posting AUTH_TIMEOUT on Client=39E7F78

005566: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout)

005567: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback

005568: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_exit called

005569: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_fallback_enter called

005570: 7w6d: dot1x-sm:Posting AUTH_FAIL on Client=39E7F78

005571: 7w6d:     dot1x_auth Fa0: during state auth_fallback, got event 15(authFail)

005572: 7w6d: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result

005573: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authc_result_enter called

005574: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005575: 7w6d: dot1x-sm:Posting AUTHC_FAIL on Client=39E7F78

005576: 7w6d:     dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail)

005577: 7w6d: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held

005578: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005579: 7w6d: dot1x-sm:Posting RESTART on Client=39E7F78

005580: 7w6d:     dot1x_auth Fa0: during state auth_held, got event 13(restart)

005581: 7w6d: @@@ dot1x_auth Fa0: auth_held -> auth_restart

005582: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_held_exit called

005583: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005584: 7w6d: dot1x-ev:Resetting the client 0000.0000.0000

005585: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005586: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005587: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005588: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005589: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005590: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005591: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005592: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005593: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005594: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005595: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005596: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005597: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005598: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005599: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005600: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005601: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005602: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005603: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005604: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005605: 7w6d: EAPOL pak dump Tx

005606: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005607: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005608: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005609: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005610: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005611: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005612: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005613: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005614: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005615: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005616: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005617: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005618: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005619: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005620: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005621: 7w6d: EAPOL pak dump Tx

005622: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005623: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005624: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005625: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005626: 7w6d: dot1x-sm:Posting EAP_REQ on Client=39E7F78

005627: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 7(eapReq)

005628: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_request

005629: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_request_action called

005630: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005631: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1  data:

005632: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005633: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005634: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005635: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005636: 7w6d: EAPOL pak dump Tx

005637: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005638: 7w6d: EAP code: 0x1  id: 0x3  length: 0x0005 type: 0x1

005639: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005640: 7w6d: dot1x-ev:Received an EAP Timeout on FastEthernet0/31 for mac 0000.0000.0000

005641: 7w6d: dot1x-sm:Posting EAP_TIMEOUT on Client=39E7F78

005642: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_request, got event 12(eapTimeout)

005643: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_request -> auth_bend_timeout

005644: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_timeout_enter called

005645: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_timeout_action called

005646: 7w6d:     dot1x_auth_bend Fa0: idle during state auth_bend_timeout

005647: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_timeout -> auth_bend_idle

005648: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_enter called

005649: 7w6d: dot1x-sm:Posting AUTH_TIMEOUT on Client=39E7F78

005650: 7w6d:     dot1x_auth Fa0: during state auth_authenticating, got event 14(authTimeout)

005651: 7w6d: @@@ dot1x_auth Fa0: auth_authenticating -> auth_fallback

005652: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_exit called

005653: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_fallback_enter called

005654: 7w6d: dot1x-sm:Posting AUTH_FAIL on Client=39E7F78

005655: 7w6d:     dot1x_auth Fa0: during state auth_fallback, got event 15(authFail)

005656: 7w6d: @@@ dot1x_auth Fa0: auth_fallback -> auth_authc_result

005657: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authc_result_enter called

005658: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005659: 7w6d: dot1x-sm:Posting AUTHC_FAIL on Client=39E7F78

005660: 7w6d:     dot1x_auth Fa0: during state auth_authc_result, got event 23(authcFail)

005661: 7w6d: @@@ dot1x_auth Fa0: auth_authc_result -> auth_held

005662: 7w6d: dot1x-ev:dot1x_guest_vlan_applicable: Guest VLAN not applicable.  Supplicant disabled and EAPOL seen on port FastEthernet0/31.

005663: 7w6d: dot1x-sm:Posting RESTART on Client=39E7F78

005664: 7w6d:     dot1x_auth Fa0: during state auth_held, got event 13(restart)

005665: 7w6d: @@@ dot1x_auth Fa0: auth_held -> auth_restart

005666: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_held_exit called

005667: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005668: 7w6d: dot1x-ev:Resetting the client 0000.0000.0000

005669: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005670: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005671: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005672: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005673: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005674: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005675: 7w6d: dot1x-sm:Posting REAUTH_MAX on Client=39E7F78

005676: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 11(reAuthMax)

005677: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_disconnected

005678: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_disconnected_enter called

005679: 7w6d:     dot1x_auth Fa0: idle during state auth_disconnected

005680: 7w6d: @@@ dot1x_auth Fa0: auth_disconnected -> auth_restart

005681: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_enter called

005682: 7w6d: dot1x-ev:Resetting the client 0000.0000.0000

005683: 7w6d: dot1x-sm:Posting !EAP_RESTART on Client=39E7F78

005684: 7w6d:     dot1x_auth Fa0: during state auth_restart, got event 6(no_eapRestart)

005685: 7w6d: @@@ dot1x_auth Fa0: auth_restart -> auth_connecting

005686: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_enter called

005687: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_restart_connecting_action called

005688: 7w6d: dot1x-packet:Received an EAP request packet from EAP for mac 0000.0000.0000

005689: 7w6d: dot1x-sm:Posting RX_REQ on Client=39E7F78

005690: 7w6d:     dot1x_auth Fa0: during state auth_connecting, got event 10(eapReq_no_reAuthMax)

005691: 7w6d: @@@ dot1x_auth Fa0: auth_connecting -> auth_authenticating

005692: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_authenticating_enter called

005693: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_connecting_authenticating_action called

005694: 7w6d: dot1x-sm:Posting AUTH_START on Client=39E7F78

005695: 7w6d:     dot1x_auth_bend Fa0: during state auth_bend_idle, got event 4(eapReq_authStart)

005696: 7w6d: @@@ dot1x_auth_bend Fa0: auth_bend_idle -> auth_bend_request

005697: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_request_enter called

005698: 7w6d: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1  data:

005699: 7w6d: dot1x-ev:FastEthernet0/31:Sending EAPOL packet to group PAE address

005700: 7w6d: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/31.

005701: 7w6d: dot1x-registry:registry:dot1x_ether_macaddr called

005702: 7w6d: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/31

005703: 7w6d: EAPOL pak dump Tx

005704: 7w6d: EAPOL Version: 0x2  type: 0x0  length: 0x0005

005705: 7w6d: EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1

005706: 7w6d: dot1x-packet:dot1x_txReq: EAPOL packet sent out for the default authenticator

005707: 7w6d: dot1x-sm:Fa0/31:0000.0000.0000:auth_bend_idle_request_action called

005708: 7w6d: dot1x-registry:dot1x_switch_port_physical_linkchange invoked on interface Fa0/31

005709: 7w6d: dot1x-ev:dot1x_mgr_if_state_change: FastEthernet0/31 has changed to DOWN

005710: 7w6d: dot1x-ev:Cleared all authenticator instances on FastEthernet0/31

Dot1x Info for FastEthernet0/31

-----------------------------------

PAE                       = AUTHENTICATOR

PortControl               = AUTO

ControlDirection          = Both

HostMode                  = SINGLE_HOST

ReAuthentication          = Disabled

QuietPeriod               = 3

ServerTimeout             = 30

SuppTimeout               = 30

ReAuthPeriod              = 3600 (Locally configured)

ReAuthMax                 = 2

MaxReq                    = 2

TxPeriod                  = 5

RateLimitPeriod           = 0

Guest-Vlan                = 106

Any idea? thanks in advance.

1 Reply 1

Did you try "Unencrypted authentication (PAP, SPAP)" tick in Network Policies?

It's probably going to solve your problem

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card