cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
431
Views
5
Helpful
0
Replies

C2960X MAC Drop after 802.1x removal

Hello buddies 
I wonder have anybody ever faced case with MACs in Drop state after dot1x decomissioning from the stack? Particularly we have:

Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 52 WS-C2960X-48LPS-L 15.2(2)E6 C2960X-UNIVERSALK9-M
  2 28 WS-C2960X-24PS-L 15.2(2)E6 C2960X-UNIVERSALK9-M
and after unconfiguring dot1x from stack we found MACs in Drop state. Binding MAC statically was rectifying forwarding but it was definitely not appropriate approach. We were not able to get back to proper behavior without any tricks untill stack reboot :\

interface GigabitEthernet2/0/20
description Client
switchport access vlan 614
switchport mode access
switchport voice vlan 761
no logging event link-status
speed 100
duplex full
srr-queue bandwidth share 1 30 35 5
srr-queue bandwidth shape 10 0 0 0
priority-queue out
no snmp trap link-status
mls qos trust cos
auto qos trust
no cdp enable
no lldp transmit
no lldp receive
end

s784#sho dot1x
Sysauthcontrol Disabled
Dot1x Protocol Version 3
s784#sho dot1x statistics
Dot1x Global Statistics for
--------------------------------------------
RxStart = 0 RxLogoff = 0 RxResp = 0 RxRespID = 0
RxReq = 0 RxInvalid = 0 RxLenErr = 0
RxTotal = 0

TxStart = 0 TxLogoff = 0 TxResp = 0
TxReq = 0 ReTxReq = 0 ReTxReqFail = 0
TxReqID = 0 ReTxReqID = 0 ReTxReqIDFail = 0
TxTotal = 0

s784#show dot1x interface g2/0/20
s784#sho mac ad int g2/0/20
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports
---- ----------- -------- -----
614 c434.6b26.3a79 DYNAMIC Drop
761 001a.e881.51ab DYNAMIC Drop
Total Mac Addresses for this criterion: 2
s784#

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card