Windows 10 EAPOL-Logoff

[kaachary]

Customer has shared Win 10 machines, with mutiple users. When user A logs off, and user B logs in, it takes close to ~4 minutes for it to get a new IP address and the corresponding SGT. Native supplicant is used and machine connects directly to the switch. With AC NAM, ti works fine. If the interface is toggled or cable is unplugged and plugged back in, it works fine. I am suspecting

https://social.technet.microsoft.com/Forums/en-US/811b5e54-3a2a-4c26-a52f-0a5ba9dfc3b1/windows-10-does-not-send-eapollogoff-on-user-sign-out?forum=win10itprosecurity

As per the link, Win 10 does not send EAPOL-Logoff on a wired connection. Is this a known issue? If yes, are there any known workarounds/tweaks/registry changes so that it sends EAPOL-Logoff message, and switch deletes the session?

Thanks.

[Jason Kunst · Accepted solution]

since this is a windows supplicant issue and anyconnect works fine, i'd recommend checking with microsoft

[Mohammad Alhyari]

In the link you shared it they said it sends an eapol start. is that true ?

as it should restart the authentication process.