Wired 802.1X issue

[Leonardo Pena Davila]

Hi folks, 

I am having an issue working with MAB , 8021.X switch 2960 & ClearPass.

Each time a connect ip phone & PC the interface goes to err-disable state even if I do noy have port security configured on the switch. 

*Apr 25 03:54:46.536: AUTH-EVENT (Fa0/12) Authorized client count: 0
*Apr 25 03:54:55.814: %DOT1X-5-FAIL: Authentication failed for client (a048.1c7c.8643) on Interface Fa0/12 AuditSessionID 0AC8C83C000004351C14B60F
*Apr 25 03:54:55.814: AUTH-EVENT (Fa0/12) Received 'AUTHC_RESULT', current method is dot1x (handle 0xC0000436)
*Apr 25 03:54:55.814: AUTH-EVENT (Fa0/12) Authc Result: no-response
*Apr 25 03:54:55.814: AUTH-EVENT (Fa0/12) Client a048.1c7c.8643, Method dot1x changing state from 'Running' to 'Authc Failed'
*Apr 25 03:54:55.814: AUTH-EVENT (Fa0/12) Client a048.1c7c.8643, Context changing state from 'Running' to 'Authc Failed'
*Apr 25 03:54:55.814: AUTH-EVE

Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 15.0(2)SE11

Regards

[hslai]

With the info given, please start with these articles:

Recovering from ErrDisabled port due to... - Cisco Community

Errdisable Port State Recovery on the Cisco IOS Platforms - Cisco

[balaji.bandi]

Can you explain and show us the configuration :

"Each time a connect ip phone & PC the interface goes to err-disable state even if I do noy have port security configured on the switch. "

The Logs show Devices trying  to authenticatte, so we need to look the configure to confirm.

or you can follow other post to mitigate the issue.

[Mike.Cifelli]

Please ensure on your switch interface configs you have configured host-mode multi-domain. Multi-domain allows a host and voice device to authenticate on the same port. HTH!