cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

898
Views
0
Helpful
1
Replies
benchj
Beginner

Problem with ACS device authentication in 802.1x

We have implemented 802.1x on an ACS server running 4.1.  They can log in and get authenticated but later they will drop out and to get authenticated back on the network they have to remove the ethernet cable and reconnect.  It  is not occuring at all supported locations but intermittently across the network.  We are using the VISTA supplicant.

1 REPLY 1
ansalaza
Beginner

Please let us see the configuration of the Switchport (show run int TYPE X/X)

1) To find out if the Switch is receiving the request from the Vista Supplicant try enabling these debugs:

debug aaa authentication

debug aaa authorization

debug dot1x all

2) To find out if the Switch if relaying the request back to the ACS Server, please enable this debug:

debug radius

Also see the status of the port while testing:

show dot1x interface TYPE X/X details [show dot1x interface fa0/3 details]

Do you receive any type of authentication requests in the ACS Server before unplug/plug ethernet cable?

HTH,

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: ISE Demo (100%)

Content for Community-Ad

ISE Webinars



Did you miss a previous ISE webinar?

CiscoISE YouTube Channel