NEAT x BPDUGuard

[Juliano Luz]

We are testing NEAT to provide network to some meeting rooms. BPDUGuard is globally enabled on authenticator switches. When supplicant switch is connected to a port, before the authentication completes, port is put in err-disable. If bpduguard is disabled on port everything works fine.

Authenticator is a 2960X running 15.0-2a.EX5.

Is this the expected behavior? Is there a way to get the port not being disabled without removing manually bpduguard?

[Francesco Molino · Accepted solution]

Hi

There is a bug detected in specific conditions:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCup00390/?referring_site=bugquickviewredir

There is a way to avoid the port going to err-disable using the command "dot1x supplicant controlled transient". However this command works only if spanning-tree bpduguard is enabled on interfaces. If it's enabled globally this command won't have any effect.