10-22-2019 11:11 AM
Hi, I have a problem with dot1x configuration on WS-C2960L-24PS-LL
Firmware 15.2(7)E0a
I have copied the configuration from a 2960x that works fine, at the first everything looks fine, copyed the interface configurtion into one of the interface and enabled the port. The client that is connected authenticated and looks fine:
Gi0/12 98bb.9b50.0a10 dot1x DATA Auth AC1D5A1100000016002F945C
The problem starts when I enabled multiple ports at the same time, then the switch crashes and reboots and continues to reboot to i unplug the connected computers.
Can someone help me out of this problem?
Crashlog from console is located under configuration.
The configuration looks like this:
aaa authentication login default local
aaa authentication dot1x default group ISE
aaa authorization network default group ISE
aaa accounting dot1x default start-stop group ISE
!
!
!
!
aaa server radius dynamic-author
client (server1) server-key xxx
client (Server2) server-key xxx
!
!
radius server ISE1
address ipv4 (Server1) auth-port 1812 acct-port 1813
key xxx
!
radius server ISE2
address ipv4 (Server2) auth-port 1812 acct-port 1813
key xxx
!
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute 31 mac format ietf upper-case
radius-server attribute 31 send nas-port-detail mac-only
radius-server dead-criteria time 5 tries 3
radius-server deadtime 10
!
aaa group server radius ISE
server name ISE1
server name ISE2
interface GigabitEthernet0/1
description ISE AUTH
switchport mode access
switchport nonegotiate
no logging event link-status
no cdp enable
authentication event fail action next-method
authentication order dot1x mab
authentication priority dot1x mab
authentication violation restrict
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout tx-period 10
dot1x timeout supp-timeout 5
storm-control broadcast level 1.50
storm-control multicast level 1.50
spanning-tree portfast edge
ip dhcp snooping limit rate 25
end
Crashlog
validblock_diagnose, code = 2
current memory block, bp = 0x3FAF568,
memorypool type is Processor
data check, ptr = 0x3FAF590
next memory block, bp = 0x3FAF6B8,
memorypool type is Processor
data check, ptr = 0x3FAF6E0
previous memory block, bp = 0x3FAF3C8,
memorypool type is Processor
data check, ptr = 0x3FAF3F0
========= Dump bp = 0x3FAF568 ======================
3FAF468: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF488: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF4A8: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF4C8: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF4E8: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF508: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF528: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF548: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF568: DC5678BB D60000 D7 2CE56D8 53DFC 3FAF6B8 3FAF3DC 94
3FAF588: 0 3BE18C BEEFBACC 3BE18C 18FF6E4 D0D0D0D 3F99B10 7132FA0
3FAF5A8: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF5C8: D0D0D0D D0D0D0D D0D0D0D D0D0D0D DC5678BB D60000 D7 271748C
3FAF5E8: 53DFC 3FAF638 3FAF57C 1C 0 3BE18C D0D0D0D 3BE18C
3FAF608: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF628: D0D0D0D D0D0D0D D0D0D0D D0D0D0D DC5678BB 0 0 2CE55B0
3FAF648: 53DFC 3FAF6B8 3FAF57C 2C 0 D0D0D0D BEEFBACC D0D0D0D
========= Dump bp->next = 0x3FAF6B8 ======================
3FAF5B8: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF5D8: DC5678BB D60000 D7 271748C 53DFC 3FAF638 3FAF57C 1C
3FAF5F8: 0 3BE18C D0D0D0D 3BE18C D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF618: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF638: DC5678BB 0 0 2CE55B0 53DFC 3FAF6B8 3FAF57C 2C
3FAF658: 0 D0D0D0D BEEFBACC D0D0D0D D0D0D0D D0D0D0D 70FE0A0 3F99220
3FAF678: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF698: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF6B8: AB1234CD D60000 D7 29686F8 18F3E64 3FAF7E8 3FAF3DC 80000084
3FAF6D8: 1 D0D0D0D 41757468 2D446566 61756C74 2D41434C 0 0
3FAF6F8: 0 0 0 0 0 0 0 0
3FAF718: 0 0 0 0 0 0 0 0
3FAF738: 0 0 0 0 0 0 0 0
3FAF758: 0 0 0 0 0 0 0 0
3FAF778: 0 0 0 0 0 0 0 0
3FAF798: 0 0 0 0 0 0 0 0
========== Dump bp->previous = 0x3FAF3DC =====================
3FAF2DC: 52414646 49432D35 34346630 35656400 0 0 0 0
3FAF2FC: 0 0 0 0 0 0 0 0
3FAF31C: 0 0 0 0 0 0 0 0
3FAF33C: 0 0 0 0 0 0 0 0
3FAF35C: 0 0 0 0 0 0 0 0
3FAF37C: 0 0 0 0 0 0 0 0
3FAF39C: 0 0 0 0 0 0 0 0
3FAF3BC: 0 0 FD0110DF AB1234CD D60000 D7 2CE56D8 89B3FC
3FAF3DC: 3FAF6B8 3FAF2AC 164 0 899858 DEADBEEF 899858 D0D0D0D
3FAF3FC: D0D0D0D 70EBF50 3FAF820 D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF41C: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF43C: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF45C: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF47C: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF49C: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
3FAF4BC: D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D D0D0D0D
============================================
%Software-forced reload
Unexpected exception to CPU vector 1 (undefined instruction), PC = 19BFC3C
-Traceback= 0x19BFC3Cz 0x2431A58z 0x163D16Cz 0x162B960z 0x18F4094z 0x18F9F04z 0x18F00D0z 0x1657FA8z
Fault address:019BFC3C
Registers:
R0 :06492B88 R1 :00000000 R2 :00000000 R3 :00000000 R4 :0362983C
R5 :00000000 R6 :00000000 R7 :02CE623C R8 :03FAF568 R9 :00000000
R10:00000000 R11:05C1E3CC R12:05C1E3D0 R13:05C1E3C8 R14:02431A58
R15:019BFC3C PSR : 6000031F
Exception Message : Undefined Instruction: E7FFDEFF
Writing crashinfo to flash:/crashinfo_ext/crashinfo_ext_4
=== Flushing messages (09:30:46 CDT Tue Oct 22 2019) ===
10-25-2019 02:23 AM
We changed the switches to 2960X, problem solved.
11-20-2019 07:27 AM
We just ran into the exact same or very similar problem. We had 4 switches go down near the exact same time. We are going to work with Cisco on a TAC case. Did you ever find a bug or specific command that was causing the problem?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide