Mac authen bypass trouble

[Rojer-bkk]

Hi Expert,

I configured MAB (mac authen bypass) on every switch ports. I have trouble to get the IP when i move my laptop to use another port due to laptop's mac-address still be recorded in previous port switch. Anyone have idea to resolve about this? Thanks

Laptop ------ IPPhone -------- Switch (supplicant) -------- RADIUS

[nspasov]

Hello Rojer,

Can you post the switch config and the version of switch code that you are using?

[Tarik Admani]

In addition to Neno's suggestion, what version of software and model is the Cisco IP phone? There is a cdp feature called 2nd port status which can let the switch port know the data port on the phone is down.

Also there is a command that is called authencation mac-move permit which is enabled globally on the switch.

Thanks,

Tarik Admani
*Please rate helpful posts*

[Rojer-bkk]

Hi,

Applied the mac-move permit command is working. Many thanks

[Tarik Admani]

I am glad that you were able to get this issue resolved. Please remember to mark this thread resolved and mark the responses provided accordingly.

Thanks,

Sent from Cisco Technical Support iPad App

[nspasov]

Thank you for sharing that command Tarik! I totally forgot about it even though it has been part of my deployments Five points from me!

Happy Holidays!