Interface is up, line protocol is down (notconnect)/dot1x

halima.naboulsi — Mon, 11 Mar 2019 01:18:30 GMT

Hello,

I configured dot1x on my swicth 4500 series, Here is the interface configration:

interface FastEthernet3/2

description Test dot1x

switchport mode access

load-interval 30

authentication event fail action authorize vlan 800

authentication host-mode multi-host

authentication port-control auto

dot1x pae authenticator

dot1x max-req 5

dot1x max-reauth-req 5

end

The status of the interface is:

FastEthernet3/2 is up, line protocol is down (notconnect)

Hardware is Fast Ethernet Port, address is 0013.80e7.64a1 (bia 0013.80e7.64a1)

Description: Test dot1x

MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 100Mb/s, link type is auto, media type is 10/100BaseTX

input flow-control is unsupported output flow-control is unsupported

ARP type: ARPA, ARP Timeout 04:00:00

Last input 00:00:33, output never, output hang never

Last clearing of "show interface" counters 00:09:11

Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

30 second input rate 0 bits/sec, 0 packets/sec

30 second output rate 0 bits/sec, 0 packets/sec

624 packets input, 72175 bytes, 0 no buffer

Received 624 broadcasts (319 multicasts)

0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 input packets with dribble condition detected

6558 packets output, 1623276 bytes, 0 underruns

0 output errors, 0 collisions, 1 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier

0 output buffer failures, 0 output buffers swapped out

When I remove the port-control configuration on the interface, the status change to UP/UP.

could you help me please?

With kind regards,

Halima

Interface is up, line protocol is down (notconnect)/dot1x

Tarik Admani — Thu, 01 Sep 2011 06:03:32 GMT

Halima,

Do you have dot1x sys-auth-control enabled globally? If not, can you turn that on and see if the dot1x process starts for this port?

Thanks,

Tarik

topic Interface is up, line protocol is down (notconnect)/dot1x in Network Access Control

Interface is up, line protocol is down (notconnect)/dot1x

Interface is up, line protocol is down (notconnect)/dot1x