aaa new-model ! aaa authentication dot1x default group radius aaa authorization network default group radius aaa accounting dot1x default start-stop group radius aaa accounting update newinfo periodic 2880 ! aaa server radius dynamic-author client 192.168.10.139 server-key Savis@2013 ! aaa session-id common dot1x system-auth-control dot1x critical eapol ! epm logging ! lldp run ! ip device tracking ip device tracking probe count 30 ip device tracking probe delay 10 ip radius source-interface vlan10 ! radius-server attribute 6 on-for-login-auth radius-server attribute 8 include-in-access-req radius-server attribute 25 access-request include radius-server dead-criteria time 10 tries 3 radius-server host 192.168.10.139 auth-port 1812 acct-port 1813 key Savis@123 radius-server retry method reorder radius-server retransmit 1 radius-server timeout 3 radius-server vsa send accounting radius-server vsa send authentication authentication critical recovery delay 1000 ! logging origin-id ip logging source-interface vlan12 logging 192.168.10.139 ! snmp-server community public RO snmp-server trap-source vlan12 snmp-server source-interface informs vlan12 ! snmp-server enable traps snmp-server enable traps snmp linkdown linkup mac-notification change move threshold ! mac address-table notification change interval 0 mac address-table notification change mac address-table notification mac-move interface gi1/0/x switchport mode access authentication event fail action next-method authentication event server dead action authorize voice authentication event server alive action reinitialize authentication host-mode multi-auth authentication open authentication order mab dot1x authentication priority dot1x mab authentication port-control auto authentication periodic authentication timer reauthenticate server authentication timer inactivity server authentication violation restrict mab dot1x pae authenticator dot1x timeout tx-period 10 spanning-tree portfast Log on switch: *Mar 13 23:38:40.520: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/22, changed state to up *Mar 13 23:38:44.119: %DOT1X-5-FAIL: Authentication failed for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:44.119: %AUTHMGR-7-RESULT: Authentication result 'timeout' from 'dot1x' for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.293: %DOT1X-5-FAIL: Authentication failed for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.293: %AUTHMGR-7-RESULT: Authentication result 'timeout' from 'dot1x' for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.293: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.293: %AUTHMGR-5-START: Starting 'mab' for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.318: %MAB-5-SUCCESS: Authentication successful for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.318: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:38:50.318: %EPM-6-POLICY_REQ: IP 0.0.0.0| MAC 8434.9722.ea90| AuditSessionID C0A80A010000007642DF1A7E| AUTHTYPE DOT1X| EVENT APPLY *Mar 13 23:38:50.318: %EPM-6-AAA: POLICY xACSACLx-IP-WIRED_MAC-5b5a8fcc| EVENT DOWNLOAD-REQUEST *Mar 13 23:38:50.410: %EPM-6-AAA: POLICY xACSACLx-IP-WIRED_MAC-5b5a8fcc| EVENT DOWNLOAD-SUCCESS *Mar 13 23:38:50.410: %EPM-6-POLICY_APP_SUCCESS: IP 169.254.45.53| MAC 8434.9722.ea90| AuditSessionID C0A80A010000007642DF1A7E| AUTHTYPE DOT1X| POLICY_TYPE Named ACL| POLICY_NAME xACSACLx-IP-WIRED_MAC-5b5a8fcc| RESULT SUCCESS *Mar 13 23:38:51.333: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up *Mar 13 23:38:51.350: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (8434.9722.ea90) on Interface Gi1/0/22 AuditSessionID C0A80A010000007642DF1A7E *Mar 13 23:39:37.211: %EPM-6-IPEVENT: IP 169.254.45.53| MAC 8434.9722.ea90| AuditSessionID C0A80A010000007642DF1A7E| AUTHTYPE DOT1X| EVENT IP-RELEASE *Mar 13 23:39:37.211: %EPM-6-IPEVENT: IP 169.254.45.53| MAC 8434.9722.ea90| AuditSessionID C0A80A010000007642DF1A7E| AUTHTYPE DOT1X| EVENT IP-WAIT *Mar 13 23:39:37.211: %EPM-6-POLICY_REQ: IP 0.0.0.0| MAC 8434.9722.ea90| AuditSessionID C0A80A010000007642DF1A7E| AUTHTYPE DOT1X| EVENT REMOVE