cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
345
Views
0
Helpful
3
Replies

802.1x monitoring

jms112080
Level 1
Level 1

I am using IAS to authenticate the machines on my network. What is the best way to monitor any failed authentication attempts at the switches?

3 Replies 3

acomiskey
Level 10
Level 10

You can alway check the "System" logs in the event viewer of your IAS machine.

We use the IAS logs, but when using machine certs as we do for authentication, if a "rogue" machine with no cert plugs in and fails, I have no way to know it ever happened. There is no log entry in IAS when a machine doesn't send some kind of authentication attempt.

What about snmp traps?

Try IEEE8021-PAE-MIB or CISCO-PAE-MIB.