cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1498
Views
10
Helpful
2
Replies

Cisco 2960L with dot1x

Ole J
Level 1
Level 1

Hi, I have a problem with dot1x configuration on WS-C2960L-24PS-LL

Firmware 15.2(7)E0a

I have copied the configuration from a 2960x that works fine, at the first everything looks fine, copyed the interface configurtion into one of the interface and enabled the port. The client that is connected authenticated and looks fine:

Gi0/12 98bb.9b50.0a10 dot1x DATA Auth AC1D5A1100000016002F945C

 

The problem starts when I enabled multiple ports at the same time, then the switch crashes and reboots and continues to reboot to i unplug the connected computers.

 

Can someone help me out of this problem?

 

Crashlog from console is located under configuration.

 

The configuration looks like this:

aaa authentication login default local
aaa authentication dot1x default group ISE
aaa authorization network default group ISE
aaa accounting dot1x default start-stop group ISE
!
!
!
!
aaa server radius dynamic-author
client (server1) server-key xxx
client (Server2) server-key xxx
!
!
radius server ISE1
address ipv4 (Server1) auth-port 1812 acct-port 1813
key xxx
!
radius server ISE2
address ipv4 (Server2) auth-port 1812 acct-port 1813
key xxx
!
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server attribute 31 mac format ietf upper-case
radius-server attribute 31 send nas-port-detail mac-only
radius-server dead-criteria time 5 tries 3
radius-server deadtime 10
!
aaa group server radius ISE
server name ISE1
server name ISE2

interface GigabitEthernet0/1
description ISE AUTH
switchport mode access
switchport nonegotiate
no logging event link-status
no cdp enable
authentication event fail action next-method
authentication order dot1x mab
authentication priority dot1x mab
authentication violation restrict
mab
no snmp trap link-status
dot1x pae authenticator
dot1x timeout tx-period 10
dot1x timeout supp-timeout 5
storm-control broadcast level 1.50
storm-control multicast level 1.50
spanning-tree portfast edge
ip dhcp snooping limit rate 25
end

 


Crashlog

validblock_diagnose, code = 2

 

current memory block, bp = 0x3FAF568,

memorypool type is Processor

data check, ptr = 0x3FAF590

 

next memory block, bp = 0x3FAF6B8,

memorypool type is Processor

data check, ptr = 0x3FAF6E0

 

previous memory block, bp = 0x3FAF3C8,

memorypool type is Processor

data check, ptr = 0x3FAF3F0

========= Dump bp = 0x3FAF568 ======================

 

3FAF468:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF488:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF4A8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF4C8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF4E8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF508:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF528:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF548:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF568: DC5678BB   D60000       D7  2CE56D8    53DFC  3FAF6B8  3FAF3DC       94

3FAF588:        0   3BE18C BEEFBACC   3BE18C  18FF6E4  D0D0D0D  3F99B10  7132FA0

3FAF5A8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF5C8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D DC5678BB   D60000       D7  271748C

3FAF5E8:    53DFC  3FAF638  3FAF57C       1C        0   3BE18C  D0D0D0D   3BE18C

3FAF608:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF628:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D DC5678BB        0        0  2CE55B0

3FAF648:    53DFC  3FAF6B8  3FAF57C       2C        0  D0D0D0D BEEFBACC  D0D0D0D

========= Dump bp->next = 0x3FAF6B8 ======================

 

3FAF5B8:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF5D8: DC5678BB   D60000       D7  271748C    53DFC  3FAF638  3FAF57C       1C

3FAF5F8:        0   3BE18C  D0D0D0D   3BE18C  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF618:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF638: DC5678BB        0        0  2CE55B0    53DFC  3FAF6B8  3FAF57C       2C

3FAF658:        0  D0D0D0D BEEFBACC  D0D0D0D  D0D0D0D  D0D0D0D  70FE0A0  3F99220

3FAF678:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF698:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF6B8: AB1234CD   D60000       D7  29686F8  18F3E64  3FAF7E8  3FAF3DC 80000084

3FAF6D8:        1  D0D0D0D 41757468 2D446566 61756C74 2D41434C        0        0

3FAF6F8:        0        0        0        0        0        0        0        0

3FAF718:        0        0        0        0        0        0        0        0

3FAF738:        0        0        0        0        0        0        0        0

3FAF758:        0        0        0        0        0        0        0        0

3FAF778:        0        0        0        0        0        0        0        0

3FAF798:        0        0        0        0        0        0        0        0

========== Dump bp->previous = 0x3FAF3DC =====================

 

3FAF2DC: 52414646 49432D35 34346630 35656400        0        0        0        0

3FAF2FC:        0        0        0        0        0        0        0        0

3FAF31C:        0        0        0        0        0        0        0        0

3FAF33C:        0        0        0        0        0        0        0        0

3FAF35C:        0        0        0        0        0        0        0        0

3FAF37C:        0        0        0        0        0        0        0        0

3FAF39C:        0        0        0        0        0        0        0        0

3FAF3BC:        0        0 FD0110DF AB1234CD   D60000       D7  2CE56D8   89B3FC

3FAF3DC:  3FAF6B8  3FAF2AC      164        0   899858 DEADBEEF   899858  D0D0D0D

3FAF3FC:  D0D0D0D  70EBF50  3FAF820  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF41C:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF43C:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF45C:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF47C:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF49C:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

3FAF4BC:  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D  D0D0D0D

============================================

 

 

%Software-forced reload

 

 

Unexpected exception to CPU vector 1 (undefined instruction), PC = 19BFC3C

-Traceback= 0x19BFC3Cz 0x2431A58z 0x163D16Cz 0x162B960z 0x18F4094z 0x18F9F04z 0x18F00D0z 0x1657FA8z

 

Fault address:019BFC3C

 

Registers:

R0 :06492B88   R1 :00000000   R2 :00000000   R3 :00000000   R4 :0362983C

R5 :00000000   R6 :00000000   R7 :02CE623C   R8 :03FAF568   R9 :00000000

R10:00000000   R11:05C1E3CC   R12:05C1E3D0   R13:05C1E3C8   R14:02431A58

R15:019BFC3C      PSR : 6000031F

Exception Message : Undefined Instruction: E7FFDEFF

 

 

Writing crashinfo to flash:/crashinfo_ext/crashinfo_ext_4

 

=== Flushing messages (09:30:46 CDT Tue Oct 22 2019) ===

2 Replies 2

Ole J
Level 1
Level 1

We changed the switches to 2960X, problem solved.

 

 

Alex Pfeil
Level 7
Level 7

We just ran into the exact same or very similar problem. We had 4 switches go down near the exact same time. We are going to work with Cisco on a TAC case. Did you ever find a bug or specific command that was causing the problem?

Review Cisco Networking products for a $25 gift card