Hello,
I need to authenticate a trunk port (with dot1x) where runs a development machine which hosts Virtual Machines.
So, the port where is connected the machine is a dot1q port.
Therefore I'd like to authenticate this machine with DOT1x, and by now it fails.
FYI dot1x runs with success on normal switch access port.
The platform is a catalyst 2960s, running the 15.0(1)SE2 IOS.
I'm using an EAP authentication method based on computer certificate.
Here below the configuration of the switch and port:
Thanks for your help
Global config:
aaa new-model
!
aaa group server radius G1
server 10.4.22.148 auth-port 1812 acct-port 1813
server 10.4.22.149 auth-port 1812 acct-port 1813
!
aaa authentication login default group G1 local
aaa authentication login console local
aaa authentication dot1x default group G1
aaa authorization exec default local
aaa authorization exec G1 if-authenticated
aaa authorization network default group G1
aaa session-id common
radius-server host 10.4.22.148 auth-port 1812 acct-port 1813 key 7 xxxxxx
radius-server host 10.4.22.149 auth-port 1812 acct-port 1813 key 7 xxxxxx
radius-server timeout 3
radius-server deadtime 1
port machine
interface GigabitEthernet4/0/8
description TEST_DEV_ON_VL141
switchport trunk allowed vlan 141,211
switchport mode trunk
authentication host-mode multi-host
authentication port-control auto
snmp trap mac-notification change added
snmp trap mac-notification change removed
dot1x pae authenticator
dot1x timeout quiet-period 3
dot1x timeout tx-period 5
dot1x max-reauth-req 5
storm-control broadcast level 20.00
storm-control action shutdown
no cdp enable
spanning-tree bpduguard enable
ip igmp filter 1
end
