topic 802.1X problem on 2960 LAN Lite. in Network Access Control

802.1X problem on 2960 LAN Lite.

dmitri — Fri, 21 Feb 2020 18:43:37 GMT

We are experiencing 801.X problems with couple of switches with LAN lite IOS image 12.2.(55)SE11. When turning on authorization on port, MAC address of remote device is desappearing from CAM table and stops responding to icmp requests. Although authorization on port is in RUNNING state.

After applying "authentication port-control force-authorized" we can ping device connected to port.

Devices with LAN Base image don't have this problem.

Can anybody help to resolve this problem or is there any bug with LAN lite 12.2.(55)SE11?

Re: 802.1X problem on 2960 LAN Lite.

Ben Walters — Wed, 17 Jan 2018 14:16:37 GMT

When the port is in the Running state it is at least trying to authenticate to the authentication server.

Are you seeing the requests coming from the switch on your authentication server at all?

You also say you have other switches that work properly, does the LAN lite switch have the same aaa and port config as the other switches?

Re: 802.1X problem on 2960 LAN Lite.

dmitri — Wed, 17 Jan 2018 14:31:05 GMT

The problem with losing MAC address on port appears only with MOXA Nport 5410 device. But this device works properly with Lan Base IOS switches.

All switches have the same aaa configurations.