topic Switch Logging issue with IBNS 2.0 concurrent Dot1x and MAB in Network Access Control https://community.cisco.com/t5/network-access-control/switch-logging-issue-with-ibns-2-0-concurrent-dot1x-and-mab/m-p/3535699#M536650 <HTML><HEAD></HEAD><BODY><P>Hi community</P><P></P><P>I have a stupid issue with IBNS 2.0 while doing Dot1x and MAB concurrently.</P><P>Because for MAB devices the authentication using dot1x will fail since there is no supplicant responding, I alway get the following log messages:</P><P>...</P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">%DOT1X-5-FAIL: Authentication failed for client (0080.64bf.abcd) on Interface Gi1/0/44 AuditSessionID 0A08161D00000ABC060A1234</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">...</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;">Since we will have several thousend ports configured using both methods, I will get to much logs on my LMS. For sure I know I can lower the level from debugging or informational to any lower than 5, but I will miss these messages which are Important:</P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">Dec 21 2016 16:07:27.019 CET: %SYS-5-CONFIG_I: Configured from console by abc123 on vty0 (10.17.1.2)</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;"><BR /></SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">Any suggestions?</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;"><BR /></SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">Thanks<BR /></SPAN></P></BODY></HTML> Wed, 21 Dec 2016 16:50:11 GMT mstraessle 2016-12-21T16:50:11Z Switch Logging issue with IBNS 2.0 concurrent Dot1x and MAB https://community.cisco.com/t5/network-access-control/switch-logging-issue-with-ibns-2-0-concurrent-dot1x-and-mab/m-p/3535699#M536650 <HTML><HEAD></HEAD><BODY><P>Hi community</P><P></P><P>I have a stupid issue with IBNS 2.0 while doing Dot1x and MAB concurrently.</P><P>Because for MAB devices the authentication using dot1x will fail since there is no supplicant responding, I alway get the following log messages:</P><P>...</P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">%DOT1X-5-FAIL: Authentication failed for client (0080.64bf.abcd) on Interface Gi1/0/44 AuditSessionID 0A08161D00000ABC060A1234</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">...</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;">Since we will have several thousend ports configured using both methods, I will get to much logs on my LMS. For sure I know I can lower the level from debugging or informational to any lower than 5, but I will miss these messages which are Important:</P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">Dec 21 2016 16:07:27.019 CET: %SYS-5-CONFIG_I: Configured from console by abc123 on vty0 (10.17.1.2)</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;"><BR /></SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">Any suggestions?</SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;"><BR /></SPAN></P><P style="font-size: 11pt; font-family: Calibri, sans-serif; color: #000000;"><SPAN lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif;">Thanks<BR /></SPAN></P></BODY></HTML> Wed, 21 Dec 2016 16:50:11 GMT https://community.cisco.com/t5/network-access-control/switch-logging-issue-with-ibns-2-0-concurrent-dot1x-and-mab/m-p/3535699#M536650 mstraessle 2016-12-21T16:50:11Z Re: Switch Logging issue with IBNS 2.0 concurrent Dot1x and MAB https://community.cisco.com/t5/network-access-control/switch-logging-issue-with-ibns-2-0-concurrent-dot1x-and-mab/m-p/3535700#M536651 <HTML><HEAD></HEAD><BODY><P>This is not a question on ISE.</P><P></P><P>I found this on Cisco support forum which might help you.</P><P></P><P><A href="https://supportforums.cisco.com/discussion/11172181/filter-syslog-router">Filter Syslog on Router | Network Management | Cisco Support Community</A></P><P></P><PRE style="padding: 9.5px; font-family: Consolas, Monaco, 'Courier New', Courier, monospace, sans-serif; font-size: 13px; color: #333333; margin: 0 0 10px; background-color: #f5f5f5; border-left-width: 1px;">logging discriminator Config facility includes SYS mnemonics includes CONFIG_I</PRE></BODY></HTML> Wed, 28 Dec 2016 22:09:01 GMT https://community.cisco.com/t5/network-access-control/switch-logging-issue-with-ibns-2-0-concurrent-dot1x-and-mab/m-p/3535700#M536651 hslai 2016-12-28T22:09:01Z