topic LACP in Network Access Control

LACP

jm.virtual01 — Wed, 05 Dec 2018 14:32:14 GMT

I have a Nokia Router and Cisco Switches are connected. I have configured the LACP on the up links. The issue is that, once i reboot the cisco switch switch, the access ports on the switch comes up first then the up links. The negotiation between nokia and cisco takes more time and during this time my access ports comes up and try to be authenticate wit the cisco ISE but it can not reach the RADIUS server.

Is there any way where the up links comes up first and then the access ports?

Re: LACP

Beacon Bits — Wed, 05 Dec 2018 18:11:49 GMT

Hi jm,

You need to read upon on how Cisco 802.1x works.

There's a sequence that Cisco switches follow.. if you understand that then probably you can figure out the best way for your network.

Check the attached document.

Regards,

Re: LACP

Surendra — Wed, 05 Dec 2018 23:38:26 GMT

To answer your question : Is there any way where the up links comes up first and then the access ports? No, we cannot make this happen on a Cisco switch. All the ports come up at the same time but if the negotiation takes time for the port channel to come up, that is something that is out of bounds from configuration perspective.

The way you can solve the problem is by configuring authentication events for server alive and also playing with the dot1x and radius server timeouts and retires. More information can be found in the document shared by Beacon Bits in the post below.