cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2203
Views
1
Helpful
2
Replies

Message Error Authenticator NOT enabled in 802.1x switch 2960X Release 15.2

fherrera77
Level 1
Level 1

In el process of debug dot1x of switch with 802.1x show message dot1x-ev:[Gi1/0/3] Dot1x authentication unable to start - Authenticator NOT enabled. The port  not authenticates with 802.1x.

 

The debug shows that the host sending packet EAPOl, both the port switch not response or dequeued the packets

 

SW_PISO9_STACK_TAM(config)#exit
SW_PISO9_STACK_TAM#
Sep 3 21:31:53.180: dot1x-packet:[0021.cc70.6773, Gi1/0/3] queuing an EAPOL pkt on Auth Q
Sep 3 21:31:53.180: dot1x-ev:[0021.cc70.6773, Gi1/0/3] New client detected, sending session start event for 0021.cc70.6773
Sep 3 21:31:53.184: AAA/AUTHEN/8021X (00000000): Pick method list 'default'
Sep 3 21:31:53.187: AAA/AUTHEN(00000000): There is no General DBReply Method Index details may not be specified
SW_PISO9_STACK_TAM#
Sep 3 21:31:53.208: %SYS-5-CONFIG_I: Configured from console by E06347 on vty0 (172.30.44.31)
SW_PISO9_STACK_TAM#
Sep 3 21:31:55.085: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/3, changed state to up
Sep 3 21:31:56.085: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/3, changed state to up
SW_PISO9_STACK_TAM#
Sep 3 21:31:58.199: dot1x-packet:[0021.cc70.6773, Gi1/0/3] queuing an EAPOL pkt on Auth Q
Sep 3 21:31:58.199: dot1x-ev:[0021.cc70.6773, Gi1/0/3] New client detected, sending session start event for 0021.cc70.6773
Sep 3 21:31:58.199: dot1x-ev:[Gi1/0/3] Dot1x authentication unable to start - Authenticator NOT enabled
Sep 3 21:31:58.245: %MAB-5-FAIL: Authentication failed for client (0021.cc70.6773) on Interface Gi1/0/3 AuditSessionID C0A8F13B000000EFF1BD0A28
SW_PISO9_STACK_TAM#
Sep 3 21:31:58.248: dot1x-ev:[Gi1/0/3] Dot1x authentication unable to start - Authenticator NOT enabled
SW_PISO9_STACK_TAM#
Sep 3 21:32:03.205: dot1x-packet:[0021.cc70.6773, Gi1/0/3] queuing an EAPOL pkt on Auth Q
Sep 3 21:32:03.205: dot1x-ev:[0021.cc70.6773, Gi1/0/3] New client detected, sending session start event for 0021.cc70.6773

 

 

2 Accepted Solutions

Accepted Solutions

Mike.Cifelli
VIP Alumni
VIP Alumni
Please ensure you have the following enabled on your interface/s:
# dot1x pae authenticator
If it is not enabled please enable and test again. If it is configured, please share interface configs and the output of:
#sh dot1x interface g1/0/3 details

Good luck & HTH!

View solution in original post

phucchautran
Level 1
Level 1

Hello,

Try the following configuration to enable dot1x authentication in global configuration mode:

dot1x system-auth-control

Regards,

Chau

View solution in original post

2 Replies 2

Mike.Cifelli
VIP Alumni
VIP Alumni
Please ensure you have the following enabled on your interface/s:
# dot1x pae authenticator
If it is not enabled please enable and test again. If it is configured, please share interface configs and the output of:
#sh dot1x interface g1/0/3 details

Good luck & HTH!

phucchautran
Level 1
Level 1

Hello,

Try the following configuration to enable dot1x authentication in global configuration mode:

dot1x system-auth-control

Regards,

Chau