Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

[dot1x error message on 2950]

hi,

i've implemeted dot1x several times and never have i seen this error before:

00:43:02: RADIUS: Received from id 47 177.77.3.70:1645, Access-Challenge, len 102

00:43:02: Attribute 79 32 015E001E

00:43:02: Attribute 24 32 43495343

00:43:02: Attribute 80 18 3656676C

00:43:02: RADIUS: EAP-login: length of eap packet = 30

00:43:02: RADIUS: EAP-login: got challenge from radius

00:43:02: dot1x-err:Unexpected response received on FastEthernet0/11: may be a retransmit

asw3.p3#

asw3.p3#

asw3.p3#

that's basically my question, what does de dot1x error mean. i have not been able to find it anywhere.

this thing is really weird since the auth process works just fine the first time around. when it comes time to reauthenticate it stops working. it's also weird that when we open a telnet session into the switch, we see all required attributes being sent by acs. when we reauthenticate dot1x, we don't.

here's some more captures. i'm going to look into a bug, but anybody's seen this before i'd appreciate some advice.

regards,

c.

00:42:53: %SYS-5-CONFIG_I: Configured from console by cisco on vty0 (172.16.51.20)

00:43:02: RADIUS: ustruct sharecount=1

00:43:02: RADIUS: EAP-login: NAS Port = 00-0b-db-0a-75-3c RemAddr =000b.db0a.753c

00:43:02: RADIUS: EAP-login: length of radius packet = 132 code = 1

00:43:02: RADIUS: Initial Transmit FastEthernet0/11 id 46 177.77.3.70:1645, Access-Request, len 132

00:43:02: Attribute 4 6 AC106321

00:43:02: Attribute 61 6 00000000

00:43:02: Attribute 1 7 646F7431

00:43:02: Attribute 6 6 00000002

00:43:02: Attribute 12 6 000005DC

00:43:02: Attribute 31 19 30302D30

00:43:02: Attribute 24 32 43495343

00:43:02: Attribute 79 12 0200000A

00:43:02: Attribute 80 18 2E015D48

00:43:02: RADIUS: Received from id 46 177.77.3.70:1645, Access-Challenge, len 7800:43:02: Attribute 79 8 015E0006

00:43:02: Attribute 24 32 43495343

00:43:02: Attribute 80 18 03623675

00:43:02: RADIUS: EAP-login: length of eap packet = 6

00:43:02: RADIUS: EAP-login: got challenge from radius

00:43:02: RADIUS: ustruct sharecount=1

00:43:02: RADIUS: EAP-login: NAS Port = 00-0b-db-0a-75-3c RemAddr =000b.db0a.753c

00:43:02: RADIUS: EAP-login: length of radius packet = 128 code = 1

00:43:02: RADIUS: Initial Transmit FastEthernet0/11 id 47 177.77.3.70:1645, Access-Request, len 128

00:43:02: Attribute 4 6 AC106321

00:43:02: Attribute 61 6 00000000

00:43:02: Attribute 1 7 646F7431

00:43:02: Attribute 6 6 00000002

00:43:02: Attribute 12 6 000005DC

00:43:02: Attribute 31 19 30302D30

00:43:02: Attribute 24 32 43495343

00:43:02: Attribute 79 8 025E0006

00:43:02: Attribute 80 18 1592181D

00:43:02: RADIUS: Received from id 47 177.77.3.70:1645, Access-Challenge, len 102

00:43:02: Attribute 79 32 015E001E

00:43:02: Attribute 24 32 43495343

00:43:02: Attribute 80 18 3656676C

00:43:02: RADIUS: EAP-login: length of eap packet = 30

00:43:02: RADIUS: EAP-login: got challenge from radius

00:43:02: dot1x-err:Unexpected response received on FastEthernet0/11: may be a retransmit

asw3.p3#

asw3.p3#

asw3.p3#

00:43:32: dot1x-err:Unexpected response received on FastEthernet0/11: may be a retransmit

you notice how atts 64,65 and 81 are never sent?

1 REPLY
Bronze

Re: [dot1x error message on 2950]

100
Views
0
Helpful
1
Replies
CreatePlease to create content