cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1905
Views
0
Helpful
1
Replies

Interface is up, line protocol is down (notconnect)/dot1x

halima.naboulsi
Level 1
Level 1

Hello,

I configured dot1x on my swicth 4500 series, Here is the interface configration:

interface FastEthernet3/2

description Test dot1x

switchport mode access

load-interval 30

authentication event fail action authorize vlan 800

authentication host-mode multi-host

authentication port-control auto

dot1x pae authenticator

dot1x max-req 5

dot1x max-reauth-req 5

end

The status of the interface is:

FastEthernet3/2 is up, line protocol is down (notconnect)

  Hardware is Fast Ethernet Port, address is 0013.80e7.64a1 (bia 0013.80e7.64a1)

  Description: Test dot1x

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Full-duplex, 100Mb/s, link type is auto, media type is 10/100BaseTX

  input flow-control is unsupported output flow-control is unsupported

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:33, output never, output hang never

  Last clearing of "show interface" counters 00:09:11

  Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  30 second input rate 0 bits/sec, 0 packets/sec

  30 second output rate 0 bits/sec, 0 packets/sec

     624 packets input, 72175 bytes, 0 no buffer

     Received 624 broadcasts (319 multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 input packets with dribble condition detected

     6558 packets output, 1623276 bytes, 0 underruns

     0 output errors, 0 collisions, 1 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out

When I remove the port-control configuration on the interface, the status change to UP/UP.

could you help me please?

With kind regards,

Halima

1 Reply 1

Tarik Admani
VIP Alumni
VIP Alumni

Halima,

Do you have dot1x sys-auth-control enabled globally? If not, can you turn that on and see if the dot1x process starts for this port?

Thanks,

Tarik