cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
931
Views
0
Helpful
4
Replies

authentication with port security in 2960x switch

kareem.shahat
Level 1
Level 1

After upgrading to version 15.2.2 E7 i have problem when running mac authentication with port security

 

ex: i have  pc with mac 1077.b159.0623 which authenticate from radius server (Aruba clearpass version 6.6.8.1000017 ) assign it in  vlan 141 

commands on interface :

switchport mode access
switchport port-security mac-address sticky
switchport port-security mac-address sticky 1077.b159.0623 vlan voice
duplex full
authentication order mab
authentication priority mab
authentication port-control auto
authentication periodic
authentication violation restrict
mab
storm-control broadcast level 1.00
spanning-tree portfast
spanning-tree bpduguard enable

 

1. when i enable port security with mac authentication (maximum mac address 2 ) it show that the mac address in vlan voice although it is not in vlan voice , in the radius server show that this mac address was already accepted and assigned already in vlan 141  

 

switchport port-security mac-address sticky 1077.b159.0623 vlan voice

 

2. but if i enable mac add with maximum 1 for port security the interface is in error-disable mode 

#show inter g4/0/21 status

Port               Name              Status                   Vlan                         Duplex Speed Type
Gi4/0/21                            err-disabled            1                            full auto 10/100/1000BaseTX

4 Replies 4

Hello.

 

is that a standalone switch, or part of a stack ?

part of stack 

Hello,

 

you could be hitting one of the bugs below:

 

Port-security not working after upgrade to 152-2.E7 on 2960X stack.
CSCvg85032
Description
Symptom:
2960X stacks running 15.2(2)E7 having port-security enabled.

Conditions:
Upgrading to 152-2.E7 with port-security configured.

Workaround:
Removing the port-security on the port resolves the issue.

 

MAC synch is not working on stack of 2960x when port-security enabled
CSCvg64424
Description
Symptom:
Switch does not learn MAC address on ports where port security is enabled.

Conditions:
2960X stacked running 15.2(2)E6

Workaround:
Remove port-securityfrom ports

Thanks for your help

 

I want to notify you that the port security already working well when i assign the port in access vlan 141 manually 

but when i run mac authentication with port security the issue happen, i want to run mac authentication with port security in the same time.