Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1683
Views
0
Helpful
1
Replies

Cisco 801 - Authentication failed for client (Unknown MAC) on Interface Fa0

Go to solution
femirand1
Level 1
Level 1

‎08-10-2018 09:42 PM - edited ‎03-11-2019 01:48 AM

Hi all, I have a little big problem here:

 

  1. I received a Cisco 801W last month.
  2. I wanted to set up a static IP in one interface.
  3. So, I connected to the router console an found a login prompt. 
  4. Given that I didn't know a valid user:password I tried to reset the password following this tutorial https://www.youtube.com/watch?v=MpgZDi32NaU
  5. (I never configure a Cisco router by the way)
  6. Basically, I follow all tutorial steps and set:

 

(config) enable secret <my-secret-password>

 

Then, restart the router and the following errors appears:

 

000039: *Aug 10 20:59:10.227 PDT: %DOT1X-5-FAIL: Authentication failed for client (Unknown MAC) on Interface Fa0 AuditSessionID 0A010101000000000000C0C0
000040: *Aug 10 20:59:10.227 PDT: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (Unknown MAC) on Interface Fa0 AuditSes0
000041: *Aug 10 20:59:10.227 PDT: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (Unknown MAC) on Interface Fa0 AuditSessionID 0A0101010000000

 

Now, I need to revert this mess, any ideas?

Thanks in advance.

 

The complete boot log is:

 

...
Installed image archive
Cisco C881W-A-K9 (revision 1.0) with 363596K/29619K bytes of memory.

5 FastEthernet interfaces
1 Gigabit Ethernet interface
1 terminal line
1 Virtual Private Network (VPN) Module
1 cisco Embedded AP (s)
DRAM configuration is 32 bits wide
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash (Read/Write)

Uncompressed configuration from 13862 bytes to 29180 bytes


Press RETURN to get started!


*Aug 11 03:58:14.631: c3600_scp_set_dstaddr2_idb(184)add = 0 name is Wlan-GigabitEthernet0
*Aug 11 03:58:27.551: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0, changed state to up
*Aug 11 03:58:27.551: %LINEPROTO-5-UPDOWN: Line protocol on Interface wlan-ap0, changed state to up
*Aug 11 03:58:27.551: %LINK-3-UPDOWN: Interface FastEthernet4, changed state to up
*Aug 11 03:58:28.263: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down
*Aug 11 03:58:28.551: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to up
000010: *Aug 11 03:58:37.627 UTC: %SYS-5-LOG_CONFIG_CHANGE: Buffer logging: level debugging, xml disabled, filtering disabled, size (64392)
000011: *Aug 10 19:58:37.711 PST: %SYS-6-CLOCKUPDATE: System clock has been updated from 03:58:37 UTC Sat Aug 11 2018 to 19:58:37 PST Fri Aug 10 2018, c.
000012: *Aug 10 20:58:37.711 PDT: %SYS-6-CLOCKUPDATE: System clock has been updated from 19:58:37 PST Fri Aug 10 2018 to 20:58:37 PDT Fri Aug 10 2018, c.
000013: *Aug 10 20:58:39.815 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel0, changed state to down
000014: *Aug 10 20:58:40.119 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to up
000015: *Aug 10 20:58:40.191 PDT: %WLAN_AP_INTF-6-NOCHANGE: Interface wlan-ap0, always stays up, to session into service-module
000016: *Aug 10 20:58:40.975 PDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 171.68.226.122 port 0 CLI Request Triggered
000017: *Aug 10 20:58:41.095 PDT: %LINK-5-CHANGED: Interface FastEthernet4, changed state to administratively down
000018: *Aug 10 20:58:41.699 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to down
000019: *Aug 10 20:58:42.107 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet4, changed state to down 
000020: *Aug 10 20:58:45.567 PDT: %SYS-5-CONFIG_I: Configured from memory by console
000021: *Aug 10 20:58:46.011 PDT: %FW-6-INIT: Firewall inspection startup completed; beginning operation.
000022: *Aug 10 20:58:46.419 PDT: %DTP-5-TRUNKPORTON: Port Wl0 has become dot1q trunk
000023: *Aug 10 20:58:47.819 PDT: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
000024: *Aug 10 20:58:47.963 PDT: %LINK-3-UPDOWN: Interface Wlan-GigabitEthernet0, changed state to up
000025: *Aug 10 20:58:48.895 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
000026: *Aug 10 20:58:48.895 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, changed state to down
000027: *Aug 10 20:58:48.895 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet2, changed state to down
000028: *Aug 10 20:58:49.111 PDT: %ENVMON-5-48V_STATUS: -48V supply OK
000029: *Aug 10 20:58:49.115 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3, changed state to down
000030: *Aug 10 20:58:49.115 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Wlan-GigabitEthernet0, changed state to up
000031: *Aug 10 20:58:50.079 PDT: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.6(2)T1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 08-Jul-16 08:19 by prod_rel_team
000032: *Aug 10 20:58:50.163 PDT: %SNMP-5-COLDSTART: SNMP agent on host sjc-femirand-881 is undergoing a cold start 
000033: *Aug 10 20:58:50.863 PDT: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
000034: *Aug 10 20:58:50.863 PDT: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
000035: *Aug 10 20:58:50.863 PDT: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is ON
000036: *Aug 10 20:58:57.595 PDT: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 171.68.226.122 port 514 started - CLI initiated
000037: *Aug 10 20:58:57.855 PDT: %SECONDCORE-5-BOOTSTAGE: ROMMON on 2nd core UP
000038: *Aug 10 20:58:57.871 PDT: %SECONDCORE-5-BOOTSTAGE: AP-BOOTLOADER on 2nd core UP
000039: *Aug 10 20:59:10.227 PDT: %DOT1X-5-FAIL: Authentication failed for client (Unknown MAC) on Interface Fa0 AuditSessionID 0A010101000000000000C0C0
000040: *Aug 10 20:59:10.227 PDT: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (Unknown MAC) on Interface Fa0 AuditSes0
000041: *Aug 10 20:59:10.227 PDT: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (Unknown MAC) on Interface Fa0 AuditSessionID 0A0101010000000
000042: *Aug 10 20:59:17.151 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to up
000043: *Aug 10 20:59:17.151 PDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to up
000044: *Aug 10 21:00:29.574 PDT: %SECONDCORE-5-BOOTSTAGE: AP-IOS on 2nd core UP
000045: *Aug 10 21:00:46.582 PDT: %SYS-5-CONFIG_I: Configured from console by on vty0 (EEM:DHCP_AP_RESERVE)
000046: *Aug 10 21:00:46.606 PDT: %HA_EM-6-LOG: DHCP_AP_RESERVE: sh cdp neig is $sjc-femirand-881#
000047: *Aug 10 21:00:46.630 PDT: %HA_EM-6-LOG: DHCP_AP_RESERVE: sh ip dhcp bind is $

 

 

1 person had this problem
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
thomas
Cisco Employee
Cisco Employee

‎08-14-2018 01:07 PM

Static IP configuration and 802.1X access control are very different things.

I recommend that you call TAC to help you setup whatever you are trying to do.

 

If you really are trying to do 802.1X on your 8xx router, then you should look at

View solution in original post

0 Helpful
1 Reply 1

Go to solution
thomas
Cisco Employee
Cisco Employee

‎08-14-2018 01:07 PM

Static IP configuration and 802.1X access control are very different things.

I recommend that you call TAC to help you setup whatever you are trying to do.

 

If you really are trying to do 802.1X on your 8xx router, then you should look at

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents