topic changing interface configurations from Dot1X to port security fails in Network Access Control

changing interface configurations from Dot1X to port security fails

Anas Hijjawi — Mon, 11 Mar 2019 04:33:26 GMT

Hi, we configured most of the switches interfaces with Dot1X, it was working fine, now we need to change some of the ports back to port security, once we enable the port security the user will be disconnected from the network.

If we make it a normal port with no security features enabled it will work fine.

We tried to default the port and configure it agai

also we tried to clear the port security for that interface, but with no luck.

Thanks in advance

Hello Anas,In that case

Saurav Lodh — Wed, 19 Mar 2014 09:19:03 GMT

Hello Anas,

In that case enabling switch to remember MAC , you could have used 802.1x with port security enabled ports. Since you have not configured port security on ports which are 802.1x enabled ports, switch will not remember the MAC. Below is suggested in this scenario.

Using 802.1X with Port Security

You can enable an 802.1X port for port security by using the dot1x multiple-hosts interface configuration command. You must also configure port security on the port by using the switchport port-security interface configuration command. With the multiple-hosts mode enabled, 802.1X authenticates the port, and port security manages network access for all MAC addresses, including that of the client. You can then limit the number or group of clients that can access the network through an 802.1X multiple-host port.

Thanks for your feedback,

Anas Hijjawi — Wed, 19 Mar 2014 09:29:56 GMT

Thanks for your feedback, actually we need to remove the Dot1X configurations from that port, we need to keep only the port security commands