topic Disconnecting the PC should in Network Access Control

802.1x windows group policy

ibrahim_hassan — Mon, 11 Mar 2019 05:01:39 GMT

We have strange issue , some users disconnected and connected again within few seconds.

which result Cisco NAC agent started again to check posture status , but no logs on the switch that the ports were down also IP Phones connected between switch and PC.

we noticed that there is group policy pushed from Domain in the same time.

any one faced this issue (when apply group policy , the network card reset?)

I tested the COA action

ibrahim_hassan — Tue, 23 Sep 2014 05:56:10 GMT

I tested the COA action "session termination" and it made the same symptom.

how can I confirm that this is not "session termination initiated from ISE" .

Disconnecting the PC should

nspasov — Wed, 24 Sep 2014 05:48:43 GMT

Disconnecting the PC should generate a disconnect message to the switch. Please provide:

1. Make and model of the phone

2. Type of device connecting to it and OS running on it

3. Make and model of the switch

4. Port configuration

Thank you for rating helpful posts!

1- CP-79452- Windows 8.1.3-

ibrahim_hassan — Thu, 04 Dec 2014 07:19:03 GMT

1- CP-7945

2- Windows 8.1.

3- WS-C3750X-24P.

4-
switchport mode access
switchport voice vlan x
ip arp inspection limit rate x
authentication event fail action next-method
authentication event server dead action reinitialize vlan x
authentication event server dead action authorize voice
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication timer reauthenticate server
mab
snmp trap mac-notification change added
snmp trap mac-notification change removed
dot1x pae authenticator
dot1x timeout tx-period 12
spanning-tree portfast
ip verify source

I also found the below log in

ibrahim_hassan — Thu, 04 Dec 2014 12:36:39 GMT

I also found the below log in event viewer of the machine:

A newly downloaded Wired Group Policy was applied to your computer.

Wired Group Policy Name: 802.1x.
Applied settings:
   AutoConfig Enabled: Yes
Wired Group Policy Summary
   Profile applied:   Yes
   Reason Code:   0