troubleshooting 802.1x failures

[andrewsigna]

Hi!

When your authentications failover from 802.1x to MAB without an apparent reason what do you usually do to troubleshoot the process?

Thanks!

[uefis.cdi]

I usually go to the authentication server and check logs. Debugs on the switch also can help.

[Javier Henderson]

You could enable the following debugs:

debug aaa authentication

debug dot1x all

debug radius

Note that the output will be very verbose, so be careful on a busy production switch, and direct debug output to a buffer rather than the console.

Javier Henderson

Cisco Systems

[nspasov]

What are the devices and their OS that are having this issue? It will also be helpful to post some screenshots of their supplicant configuration. 

Thank you for rating helpful posts!