mac address bypass and recovery

[CSCO11968887]

switch:c2960-48TC-L IOS Version 15.0(2)EX5
Radius ACS3.3

aaa authentication dot1x default group radius
aaa accounting dot1x default start-stop group radius

radius-server host 10.0.0.13 auth-port 1812 acct-port 1813 key 7 xxxxxxxxx

interface FastEthernet0/9
switchport mode access
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab
authentication priority mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate 60
mab
spanning-tree portfast

i only use MAB not use 802.1X and MAC passed MAB authentication,
when RADIUS server becomes unavailable , i hope MAC bypass and don't disconnect session,after into Critical VLAN
when RADIUS server becomes available from unavailable , i hope Critical VLAN auto return to common VLAN and don't disconnect session
can MAB  do it ?

i try following command but fail
authentication event server alive action reinitialize
authentication recovery delay 1

[nspasov · Accepted solution]

Hi there, can you try the following instead:

authentication event server dead action authorize vlan <your VLAN>
authentication event server alive action reinitialize

Thank you for rating helpful posts!

[CSCO11968887]

i try it

but recovery mechanism

don't work

[nspasov]

Just to confirm, the VLAN authorization works when the server is "dead" but then the reinitialization does not work when the server is "alive" ?

Thank you for rating helpful posts!

[CSCO11968887]

yes , when the server is "dead" but then the reinitialization does not work when the server is "alive"

 is  "authentication event server alive action reinitialize" work on 802.1x ?