C800 router with DOT1X interfaces

Donia — Tue, 09 Nov 2021 11:46:10 GMT

Hi all,

i need any help on the below problem as i have c800 router using it as a switch. All interfaces is configured with dot1x configuration with voice vlan as below

switchport access vlan 800

switchport voice vlan 100
no ip address
authentication event server dead action reinitialize vlan 10
authentication event server dead action authorize voice
authentication host-mode multi-auth
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout quiet-period 5
dot1x timeout server-timeout 5
dot1x timeout tx-period 3
dot1x timeout supp-timeout 8
dot1x max-req 1
spanning-tree portfast

At the beginning we found only the phone is working but the laptop isn't working then i tried to remove the configuration and add them again i got a log on the router as below

%DOT1X_SWITCH-5-ERR_VLAN_EQ_VVLAN: Data VLAN 100 on port GigabitEthernet7 cannot be equivalent to the Voice VLAN AuditSessionID 0AAA000A0000005B115E41C0

i am sure from the voice vlan number and data valn so don't know what this log means exactly.

Also i tried to remove dot1x configuration and configure the interface with normal configuration of data and voice as below

switchport mode access

switchport voice vlan 100

but the phone didn't work . I am sure that routing is working fine as i checked by trace and ping from this vlan till the authentication server and everything is ok

does anyone can help me with solution for this problem?

Re: C800 router with DOT1X interfaces

Georg Pauwen — Tue, 09 Nov 2021 11:57:35 GMT

Hello,

try and change the dot1x timeout period to 10:

--> dot1x timeout tx-period 10

Re: C800 router with DOT1X interfaces

Donia — Tue, 09 Nov 2021 12:29:03 GMT

I already tried to make that but it didn't solve the problem.

Re: C800 router with DOT1X interfaces

Georg Pauwen — Tue, 09 Nov 2021 12:35:34 GMT

Hello,

I guess you have already looked at the thread linked below...?

https://community.cisco.com/t5/switching/dot1x-switch-messages-causing-high-response-times/td-p/3914319

Re: C800 router with DOT1X interfaces

Donia — Tue, 09 Nov 2021 14:24:28 GMT

i already saw this one but didn't help me as i changed timeout but problem still existing

topic C800 router with DOT1X interfaces in Routing

C800 router with DOT1X interfaces

Re: C800 router with DOT1X interfaces

Re: C800 router with DOT1X interfaces

Re: C800 router with DOT1X interfaces

Re: C800 router with DOT1X interfaces