topic 1- port configuration: in Network Access Control

IEEE802.1X

alibarzoodeh — Mon, 11 Mar 2019 06:55:46 GMT

Dear All

I implemented dot1x on monitor mode deployment, In my LAN environment.

some client connect third party access point to switch, after some minutes switch stop any responding. in this situation management plan and data plan is don.

the only error on console port is: memory is low, try another time

this situation continue until the device restarted.

how can i fix this?

Hi there, a couple of

nspasov — Thu, 21 Jul 2016 16:22:55 GMT

Hi there, a couple of questions:

1. What is the switch make and model that is giving you the issue?

2. What version of code is it running?

3. Can you post the RADIUS and AAA configs

Thank you for rating helpful posts!

hello

alibarzoodeh — Thu, 21 Jul 2016 16:50:49 GMT

hello

My configuration is:

1. WS-C2960-48PSTL

2. 12.2(55)SE9

3. aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client X.X.X.X server-key ******
client X.X.X.X server-key ******
radius-server host X.X.X.X key ******
radius-server host X.X.X.X key ******
radius-server attribute 6 on-for-login-auth

radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server directed-request
radius-server vsa send accounting
radius-server vsa send authentication

Can you also post:

nspasov — Mon, 25 Jul 2016 05:58:09 GMT

Can you also post:

1. The port config where the APs are connecting

2. The exact error message that you are getting from the console

3. The output from show authentication session interface interface_name_number ---> Make sure you run this command when the issue appears

Thank you for rating helpful posts!

1- port configuration:

alibarzoodeh — Mon, 25 Jul 2016 08:12:19 GMT

1- port configuration:

switchport mode access

switchport access vlan X

authentication open
authentication host-mode multi-auth
authentication priority dot1x mab
authentication port-control auto
dot1x timeout tx-period 10
mab
dot1x pae authenticator

2- consule error: %%low on memory; try again later

3- user authenticate and authorised successfully, but when the issue occur, there isn't any access to device

This looks like a memory leak

nspasov — Mon, 25 Jul 2016 16:14:50 GMT

This looks like a memory leak issue that is either hardware but most likely software related. I would suggest upgrading to: 12.2.55-SE10 which appears to be the current recommended version by Cisco.

Give that a try and let us know if the issue gets resolved.

Thank you for rating helpful posts!