Hi everybody.
I'm facing a bit of an issue with dot1x authentication on Cisco iOS 15. My knowhow might not be complete in this area (dot1x), so please eventually explain to me what I missed...
Now, the problem is as follows: on a couple of switchports there are some unmanaged 5- or 8-port switches. On all Catalyst switchports, I have following setup.
interface GigabitEthernet0/2
description Client-VLAN
switchport access vlan 10
switchport mode access
switchport voice vlan 40
no logging event link-status
authentication host-mode multi-host
authentication open
authentication order mab
authentication port-control auto
mab
dot1x pae authenticator
dot1x timeout quiet-period 1
dot1x timeout server-timeout 2
dot1x timeout tx-period 1
spanning-tree portfast
end
When more than 1 client is connected behind the tiny unmanaged switch, only the first one gets network connectivity, the others won't. Looking at the MAC address list of that port, I then see this:
vxs00a2#sh mac address-table int gi0/2
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
10 0020.4a01.7302 DROP Gi0/2
10 00e0.c552.99c6 DYNAMIC Gi0/2
10 0020.4a01.7317 DROP Gi0/2
Total Mac Addresses for this criterion: 3
My expectation would be, that all 3 devices get connected (Type DYNAMIC) because of the above config statement "authentication host-mode multi-host". Am I wrong with this assumption?
Many thanks for any help/clarifications...
Regards,
Flavio.
