Port security & dot1x

[etxlews-SE]

Hi,

I'm trying to set up dot1x with MAC authentication bypass (MAB) on a C3560, and I want the switch to send a SNMP trap upon authentication failure.

Q: Can port security and MAB be combined in this way?

-Leo

[jafrazie]

Have you tried looking at your AAA server's failure logging capabilities?

Is this for troubleshooting? Unfortunately, the switch may not have all the details on why the session fails ..

Thanks,

[etxlews-SE]

No, I have not.

My intention was to test the concept: can the switch send a trap when a Radius-reject is received?

Will it be possible to define such a (security violation) action together with dot1x?

Thanks Leo