topic Re: AAA- missing configuration on Catalyst 3650 in Network Access Control

AAA- missing configuration on Catalyst 3650

INEMINEMINEMINEM — Tue, 11 May 2021 22:53:48 GMT

Hello guys,

I'm trying to configure 802.1x on my LAB environment on a old catalyst 3650 to connect to ISE.

Switch Ports    Model                   SW Version   SW Image
------ ----- -----                    ---------- ----------
*        1 26      WS-C3560-24PS 12.2(46)SE    C3560-ADVIPSERVICESK9-M

The issue that I have is that from the below commands in RED the authentication are missing, I cannot enter these commands.

interface fastEthernet 0/1
 switchport mode access 
 switchport access vlan 1
 spanning-tree portfast
 spanning-tree bpduguard enable 
 ip access-group PRE-AUTH in
 authentication priority dot1x mab
 authentication order dot1x mab
 authentication port-control auto
 authentication event fail action next-method
 authentication event server alive action reinitialize
 authentication host-mode multi-auth
 authentication periodic
 authentication violation restrict
 dot1x pae authenticator
 dot1x timeout tx-period 10
 dot1x violation-mode protect
 mab

Any idea what is going on?

SW Version, SW Image?

Thanks in advanced.

Best Regards,

INEM

Re: AAA- missing configuration on Catalyst 3650

Greg Gibbs — Tue, 11 May 2021 23:52:54 GMT

That code version has limited support for NAC and those commands are not available. See the Configuration Guide for that release.

Those commands were not introduced until the 12.2(55)SE code train.

I'm not sure if you will be able to find code for that switch anymore, however, as it has been end of support since 2015.

Re: AAA- missing configuration on Catalyst 3650

INEMINEMINEMINEM — Wed, 12 May 2021 07:45:04 GMT

Hi Greg,

Can you point me what IOS have these command supports from the link below:

https://software.cisco.com/download/home/282979363/type/280805680/release/12.2.55-SE13

Thanks in advanced.

Best Regards,

INEM

Re: AAA- missing configuration on Catalyst 3650

balaji.bandi — Wed, 12 May 2021 10:43:39 GMT

Download 3650 Firmware from below :

12.2.55-SE12 MD

https://software.cisco.com/download/home/282526526/type/280805680/release/12.2.55-SE12?catid=268438038

Re: AAA- missing configuration on Catalyst 3650

Greg Gibbs — Wed, 12 May 2021 23:27:30 GMT

You are missing a key point here. The output you posted from 'show version' lists the platform as WS-C3560-24PS. This hardware is not a 3650, but rather a 3560 which is End of Support.

The 3750-X software links posted are not compatible with this platform.

Re: AAA- missing configuration on Catalyst 3650

balaji.bandi — Thu, 13 May 2021 02:33:56 GMT

@Greg Gibbs good catch...........grrr missed it.