dot1x on 2950

robert.dobson — Sun, 10 Mar 2019 20:54:08 GMT

Hello,

I have a 2950 and have tried in vain to confure a single port to try out dot1x authentication on it.

When I set dot1x port control to auto, and check the status of the port using "Show dot1x all" command it keeps saying the port status is "n/a".

It was my understanding the port should default to "Unauthorized" and not forward traffic until authenticated.

Not sure why, i have followed the documentation from Cisco. Even if my radius aaa config is wrong, should the port not be stopping regular traffic?

Does bootp traffic forward on a dot1x port before authorization?

Thanks,

- Rob

Re: dot1x on 2950

jafrazie — Tue, 23 Nov 2004 23:44:43 GMT

The port status is n/a most likely b/c you do not have L1 connectivity to the port.

If you plug something into it, the status should look something like this:

Dot1x Info for interface FastEthernet0/48

----------------------------------------------------

Supplicant MAC

AuthSM State = CONNECTING

BendSM State = IDLE

PortStatus = UNAUTHORIZED

bootp traffic should not be forwarded before dot1x authorization.

Hope this helps.