IEEE802.1X

[alibarzoodeh]

Dear All

I implemented dot1x on monitor mode deployment, In my LAN environment.

some client connect third party access point to switch, after some minutes switch stop any responding. in this situation management plan and data plan is don. 

the only error on console port is: memory is low, try another time

this situation continue until the device restarted.

how can i fix this?  

[nspasov]

Hi there, a couple of questions:

1. What is the switch make and model that is giving you the issue?

2. What version of code is it running?

3. Can you post the RADIUS and AAA configs

Thank you for rating helpful posts!

[alibarzoodeh]

hello

My configuration is:

1. WS-C2960-48PSTL

2. 12.2(55)SE9

3. aaa authentication dot1x default group radius
    aaa authorization network default group radius
    aaa accounting dot1x default start-stop group radius
    aaa server radius dynamic-author
      client X.X.X.X server-key ******
      client X.X.X.X server-key ******
   radius-server host X.X.X.X key ******
   radius-server host X.X.X.X key ******
   radius-server attribute 6 on-for-login-auth

   radius-server attribute 8 include-in-access-req
   radius-server attribute 25 access-request include
   radius-server dead-criteria time 5 tries 3
   radius-server directed-request
   radius-server vsa send accounting
   radius-server vsa send authentication

[nspasov]

Can you also post:

1. The port config where the APs are connecting

2. The exact error message that you are getting from the console

3. The output from show authentication session interface interface_name_number ---> Make sure you run this command when the issue appears

Thank you for rating helpful posts!

[alibarzoodeh]

1- port configuration:

switchport mode access

switchport access vlan X

authentication open
authentication host-mode multi-auth
authentication priority dot1x mab
authentication port-control auto
dot1x timeout tx-period 10
mab
dot1x pae authenticator

2-  consule error: %%low on memory; try again later

3- user authenticate and authorised  successfully, but when the issue occur, there isn't any access to device 

[nspasov]

This looks like a memory leak issue that is either hardware but most likely software related. I would suggest upgrading to: 12.2.55-SE10 which appears to be the current recommended version by Cisco. 

Give that a try and let us know if the issue gets resolved. 

Thank you for rating helpful posts!