<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic unknown MAC address in Network Access Control</title>
    <link>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039725#M23832</link>
    <description>&lt;P&gt;&lt;BR /&gt;Dears,&lt;BR /&gt;&lt;BR /&gt;we have fingerprint machines, when connecting the machine to a port configured for dot1x the dot1x authentication fails, and MAB authentication keeps in running state as the result below. the mac address keeps unknow&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;Interface:&amp;nbsp; GigabitEthernet3/0/7&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; MAC Address:&amp;nbsp; Unknown&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; IP Address:&amp;nbsp; Unknown&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Status:&amp;nbsp; Running&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Domain:&amp;nbsp; UNKNOWN&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Security Policy:&amp;nbsp; Should Secure&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Security Status:&amp;nbsp; Unsecure&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Oper host mode:&amp;nbsp; multi-domain&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Oper control dir:&amp;nbsp; both&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Session timeout:&amp;nbsp; N/A&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Idle timeout:&amp;nbsp; N/A&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; Common Session ID:&amp;nbsp; 0A0A6507000032815AE3D7D3&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Acct Session ID:&amp;nbsp; 0x000097C0&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Handle:&amp;nbsp; 0x8F000394&lt;BR /&gt;&lt;BR /&gt;Runnable methods list:&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Method&amp;nbsp;&amp;nbsp; State&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; dot1x&amp;nbsp;&amp;nbsp;&amp;nbsp; Failed over&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; mab&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Running&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;and i receive the message below&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;%DOT1X-5-FAIL: Authentication failed for client (Unknown MAC) on Interface Gi3/0/7 AuditSessionID 0A0A6507000032965B2927BB&lt;BR /&gt;%AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (Unknown MAC) on Interface Gi3/0/7 AuditSessionID 0A0A6507000032965B2927BB&lt;BR /&gt;%AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (Unknown MAC) on Interface Gi3/0/7 AuditSessionID 0A0A6507000032965B2927BB&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;no port security is configured on the port.&lt;BR /&gt;&lt;BR /&gt;when we remove the dot1x configuration and configure port security we see the machine mac address on the port.&lt;BR /&gt;&lt;BR /&gt;switch ios Version 15.0(2)SE10a&amp;nbsp; switch hardware 3750 stacked.&lt;BR /&gt;&lt;BR /&gt;please advise,&lt;BR /&gt;&lt;BR /&gt;Thanks in advance.&lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2019 07:29:06 GMT</pubDate>
    <dc:creator>Maher Shaban</dc:creator>
    <dc:date>2019-03-11T07:29:06Z</dc:date>
    <item>
      <title>unknown MAC address</title>
      <link>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039725#M23832</link>
      <description>&lt;P&gt;&lt;BR /&gt;Dears,&lt;BR /&gt;&lt;BR /&gt;we have fingerprint machines, when connecting the machine to a port configured for dot1x the dot1x authentication fails, and MAB authentication keeps in running state as the result below. the mac address keeps unknow&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;Interface:&amp;nbsp; GigabitEthernet3/0/7&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; MAC Address:&amp;nbsp; Unknown&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; IP Address:&amp;nbsp; Unknown&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Status:&amp;nbsp; Running&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Domain:&amp;nbsp; UNKNOWN&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Security Policy:&amp;nbsp; Should Secure&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Security Status:&amp;nbsp; Unsecure&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Oper host mode:&amp;nbsp; multi-domain&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Oper control dir:&amp;nbsp; both&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Session timeout:&amp;nbsp; N/A&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Idle timeout:&amp;nbsp; N/A&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; Common Session ID:&amp;nbsp; 0A0A6507000032815AE3D7D3&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Acct Session ID:&amp;nbsp; 0x000097C0&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Handle:&amp;nbsp; 0x8F000394&lt;BR /&gt;&lt;BR /&gt;Runnable methods list:&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Method&amp;nbsp;&amp;nbsp; State&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; dot1x&amp;nbsp;&amp;nbsp;&amp;nbsp; Failed over&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; mab&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Running&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;and i receive the message below&lt;BR /&gt;&lt;BR /&gt;&amp;nbsp;%DOT1X-5-FAIL: Authentication failed for client (Unknown MAC) on Interface Gi3/0/7 AuditSessionID 0A0A6507000032965B2927BB&lt;BR /&gt;%AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (Unknown MAC) on Interface Gi3/0/7 AuditSessionID 0A0A6507000032965B2927BB&lt;BR /&gt;%AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (Unknown MAC) on Interface Gi3/0/7 AuditSessionID 0A0A6507000032965B2927BB&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;no port security is configured on the port.&lt;BR /&gt;&lt;BR /&gt;when we remove the dot1x configuration and configure port security we see the machine mac address on the port.&lt;BR /&gt;&lt;BR /&gt;switch ios Version 15.0(2)SE10a&amp;nbsp; switch hardware 3750 stacked.&lt;BR /&gt;&lt;BR /&gt;please advise,&lt;BR /&gt;&lt;BR /&gt;Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 07:29:06 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039725#M23832</guid>
      <dc:creator>Maher Shaban</dc:creator>
      <dc:date>2019-03-11T07:29:06Z</dc:date>
    </item>
    <item>
      <title>Hi Maher,</title>
      <link>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039726#M23833</link>
      <description>&lt;P&gt;Hi Maher,&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Could you change the authentication order and make it 'mab' first then dot1x and check the status?&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Regards,&lt;/P&gt;
&lt;P&gt;Kush&lt;/P&gt;</description>
      <pubDate>Wed, 22 Feb 2017 11:44:25 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039726#M23833</guid>
      <dc:creator>kushsriva</dc:creator>
      <dc:date>2017-02-22T11:44:25Z</dc:date>
    </item>
    <item>
      <title>Hi Kush,</title>
      <link>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039727#M23834</link>
      <description>&lt;P&gt;Hi Kush,&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;I've had tried that too with no news.&lt;/P&gt;
&lt;P&gt;&lt;/P&gt;
&lt;P&gt;Thanks,&lt;/P&gt;
&lt;P&gt;Maher&lt;/P&gt;</description>
      <pubDate>Wed, 22 Feb 2017 12:45:39 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-access-control/unknown-mac-address/m-p/3039727#M23834</guid>
      <dc:creator>Maher Shaban</dc:creator>
      <dc:date>2017-02-22T12:45:39Z</dc:date>
    </item>
  </channel>
</rss>

