Hi All,
I have deployed the following setting on this switch.
However, the switch log mention it fails to connect the NAC.
Do someone have any ideas?
Thanks,
Kay
----------------------------------------------------------------------------------------
aaa new-model
!
!
aaa group server radius NACSvr
server name HKGNAC0001
!
aaa authentication dot1x default group NACSvr
aaa authorization network default group NACSvr
aaa accounting dot1x default start-stop group NACSvr
aaa accounting system default start-stop group NACSvr
!
!
!
aaa server radius dynamic-author
client 192.168.97.100 server-key 7 03055908575D72
!
!
!
aaa session-id common
authentication mac-move permit
dot1x system-auth-control
interface GigabitEthernet2/0/11
description MeetingRm1-D55
switchport access vlan 150
switchport mode access
authentication event fail retry 4 action authorize vlan 300
authentication event server dead action authorize vlan 150
authentication event no-response action authorize vlan 300
authentication order mab
authentication port-control auto
authentication periodic
authentication violation restrict
mab
spanning-tree portfast
ip radius source-interface Vlan150
radius server HKGNAC0001
address ipv4 192.168.97.100 auth-port 1812 acct-port 1813
key 7 094D4C0A485744
==================================================================================
LOG
==================================================================================
Log Buffer (4096 bytes):
c 13 02:05:02.618: AUTH-SYNC: [00e0.4cf0.d72f, Gi2/0/11] Added addr attribute data
Dec 13 02:05:02.618: AUTH-SYNC: [Gi2/0/11] Adjust length before sending MPM from 4012 to 44
Dec 13 02:05:02.618: AUTH-SYNC: [00e0.4cf0.d72f, Gi2/0/11] Synced add/update addr for 0xB2000028 (single-value key)
Dec 13 02:05:02.622: AUTH-EVENT: [00e0.4cf0.d72f, Gi2/0/11] Single update event is posted from Session Mgr IPDT Shim
Dec 13 02:05:02.622: AUTH-EVENT: [00e0.4cf0.d72f, Gi2/0/11] Received internal event SINGLE_ID_UPDATE (handle 0xB2000028)
Dec 13 02:05:02.622: AUTH-SYNC: [Gi2/0/11] Add sync event feature 0 tag 14, size 8
Dec 13 02:05:02.622: AUTH-SYNC: [Gi2/0/11] Add sync event feature 0 tag 15, size 8 + 12 (MPM)
Dec 13 02:05:02.622: AUTH-SYNC: [00e0.4cf0.d72f, Gi2/0/11] Added addr attribute data
Dec 13 02:05:02.622: AUTH-SYNC: [Gi2/0/11] Adjust length before sending MPM from 4012 to 44
Dec 13 02:05:02.622: AUTH-SYNC: [00e0.4cf0.d72f, Gi2/0/11] Synced add/update addr for 0xB2000028 (single-value key)
Dec 13 02:05:04.453: RADIUS(00000000): Request timed out!
Dec 13 02:05:04.453: RADIUS: acct-timeout for 1ECAFFA8 now 15, acct-jitter 0, acct-delay-time (at 1ECB009D) now 15
Dec 13 02:05:04.453: RADIUS: Retransmit to (192.168.97.100:1812,1813) for id 1646/243
Dec 13 02:05:04.457: RADIUS(00000000): Started 5 sec timeout
Dec 13 02:05:09.494: RADIUS(00000000): Request timed out!
Dec 13 02:05:09.494: RADIUS: acct-timeout for 1ECAFFA8 now 20, acct-jitter 0, acct-delay-time (at 1ECB009D) now 20
Dec 13 02:05:09.494: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.97.100:1812,1813 is not responding.
Dec 13 02:05:09.494: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.97.100:1812,1813 is being marked alive.
Dec 13 02:05:09.497: RADIUS: No response from (192.168.97.100:1812,1813) for id 1646/243
Dec 13 02:05:09.497: %RADIUS-3-NOACCOUNTINGRESPONSE: Accounting message Start for session 00000037 failed to receive Accounting Response.
Dec 13 02:05:09.497: AUTH-EVENT: Raising ext evt AAA Available (5) on session 0xB2000028, client (unknown) (0), hdl 0x00000000, attr_list 0x00000000
Dec 13 02:05:09.497: AUTH-EVENT: [00e0.4cf0.d72f, Gi2/0/11] Handling external PRE event AAA Available for context 0xB2000028.
Dec 13 02:05:09.501: RADIUS/DECODE: No response from radius-server; parse response; FAIL
Dec 13 02:05:09.501: RADIUS/DECODE: Case error(no response/ bad packet/ op decode);parse response; FAIL
Dec 13 02:05:09.501: AUTH-EVENT: Auth-mgr aaa_acct_reply
Dec 13 02:05:12.416: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.5d96.0702 in vlan 150 is flapping between port Gi1/0/41 and port Gi2/0/44
Dec 13 02:05:14.817: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.5d96.8100 in vlan 150 is flapping between port Gi1/0/41 and port Gi2/0/44
Dec 13 02:05:14.869: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.5d96.8103 in vlan 150 is flapping between port Gi1/0/41 and port Gi2/0/44
Dec 13 02:05:18.333: AAA/AUTHOR: auth_need : user= 'aedas' ruser= 'BJSSTK0001'rem_addr= '192.168.98.82' priv= 15 list= '' AUTHOR-TYPE= 'commands'
Dec 13 02:05:29.025: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.5d96.8100 in vlan 150 is flapping between port Gi1/0/41 and port Gi2/0/44
Dec 13 02:05:29.493: AUTH-EVENT: [00e0.4cf0.d72f, Gi2/0/11] Single update event is posted from Session Mgr IPDT Shim
Dec 13 02:05:29.497: AUTH-EVENT: [00e0.4cf0.d72f, Gi2/0/11] Received internal event SINGLE_ID_UPDATE (handle 0xB2000028)
Dec 13 02:05:29.497: AUTH-SYNC: [Gi2/0/11] Add sync event feature 0 tag 14, size 8
Dec 13 02:05:29.497: AUTH-SYNC: [Gi2/0/11] Add sync event feature 0 tag 15, size 8 + 12 (MPM)
Dec 13 02:05:29.497: AUTH-SYNC: [00e0.4cf0.d72f, Gi2/0/11] Added addr attribute data
Dec 13 02:05:29.497: AUTH-SYNC: [Gi2/0/11] Adjust length before sending MPM from 4012 to 44
Dec 13 02:05:29.497: AUTH-SYNC: [00e0.4cf0.d72f, Gi2/0/11] Synced add/update addr for 0xB2000028 (single-value key)
Dec 13 02:05:32.548: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.5d96.8103 in vlan 150 is flapping between port Gi1/0/41 and port Gi2/0/44
Dec 13 02:05:33.656: %SW_MATM-4-MACFLAP_NOTIF: Host 0015.5d96.0702 in vlan 150 is flapping between port Gi1/0/41 and port Gi2/0/44
BJSSTK0001# ping 192.168.97.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.97.100, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 45/48/53 ms
BJSSTK0001#
