Cisco 2960X with dot1x - %PM-3-INTERNALERROR: Port Manager Internal Software Error (!pm_vtpvlan_bitlist_test(&pd->operInfo.trunkVlans, vlan):

[rrsstefano]

Hi all,

I want to ask community for a suggestion regarding a potential problem noted on a stack of 2960x with

Cisco IP Phones and PCs connected behind phones

Some customers informed us that, sporadically , the PC behind phone is not able to authenticate itself through dot1x while the ip phone is correctly authenticated.

The solution seems to unplug/plug again the ip phone; during automatical retries to authenticate apper on switch logs messages like this :

Aug 31 07:34:06.341: %DOT1X-5-FAIL: Authentication failed for client (b4b5.2fc2.a09b) on Interface Gi2/0/4 AuditSessionID 0A47F045000001121F45FED3
Aug 31 07:34:06.509: %MAB-5-FAIL: Authentication failed for client (b4b5.2fc2.a09b) on Interface Gi2/0/4 AuditSessionID 0A47F045000001121F45FED3
Aug 31 07:35:09.785: %DOT1X-5-FAIL: Authentication failed for client (b4b5.2fc2.a09b) on Interface Gi2/0/4 AuditSessionID 0A47F045000001131F46F6A9
Aug 31 07:35:09.946: %MAB-5-FAIL: Authentication failed for client (b4b5.2fc2.a09b) on Interface Gi2/0/4 AuditSessionID 0A47F045000001131F46F6A9
Aug 31 07:35:45.741: %DOT1X-5-FAIL: Authentication failed for client (b4b5.2fc2.a09b) on Interface Gi2/0/4 AuditSessionID 0A47F045000001131F46F6A9
Aug 31 07:36:09.523: %PM-3-INTERNALERROR: Port Manager Internal Software Error (!pm_vtpvlan_bitlist_test(&pd->operInfo.trunkVlans, vlan): ../switch/pm/pm_vlan.c: 1749: pm_vlan_add_port)
-Traceback= 555EECz 2ADAFB0z 2B57C00z 2B1E328z 2553144z 256176Cz 2561A78z 2561F74z 2563838z 2580168z 2581D40z 18A1FD0z 18804C0z 18847C8z 1EA0558z 1884734z

In normal condition we see :

#show mac address-table interface gigabitEthernet 2/0/4
          Mac Address Table
-------------------------------------------

Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
 102    b4b5.2fc2.a09b    STATIC      Gi2/0/4
 202    f866.f2f6.dc37    STATIC      Gi2/0/4
Total Mac Addresses for this criterion: 2

where

vlan 102 : data vlan

vlan 202 : voice vlan

interface GigabitEthernet2/0/4
 description verso presa Lan Telefono IP + PC
 switchport access vlan 102
 switchport mode access
 switchport voice vlan 202
 srr-queue bandwidth share 10 10 20 60
 queue-set 2
 priority-queue out
 authentication control-direction in
 authentication event fail action authorize vlan 999
 authentication event server dead action authorize vlan 102
 authentication event server dead action authorize voice
 authentication event no-response action authorize vlan 999
 authentication event server alive action reinitialize
 authentication host-mode multi-domain
 authentication port-control auto
 authentication periodic
 authentication timer reauthenticate server
 mab
 mls qos trust device cisco-phone
 mls qos trust cos
 dot1x pae authenticator
 dot1x timeout tx-period 3
 spanning-tree portfast
 spanning-tree bpduguard enable
 service-policy input PC-SoftPhone+HardPhone
end

Release running on switch stack is :

Switch Ports Model                     SW Version            SW Image                
------ ----- -----                     ----------            ----------              
*    1 52    WS-C2960X-48LPD-L         15.2(2)E6             C2960X-UNIVERSALK9-M    
     2 52    WS-C2960X-48LPD-L         15.2(2)E6             C2960X-UNIVERSALK9-M    

Have you some similar experience regarding thie behaviour?

Thanks to all !!

[kimby200602]

Hello rrsstefano,

Seems like we have the same error.

The PC behind the IP phone is incorrectly assigned to the voice VLAN.

Did you manage to fix this?

I am about to open a TAC case for this.

Thank you!

Regards, Kliment

[Digioutsource]

We seem to be having the same issue. Were you able to obtain a solution for this?

[rrsstefano]

Hi all,

we have still problem 'in general' with these stacks and release .... other stange behaviours like a device put randomically in vlan 1 while vlan 1 is not configured in ports.... and this happen not only on ports configured with NAC ....very strange behaviours...we have a TAC case opened through our provider but no good results for now...

[BorislavPenchev0962]

hey do you know if your TAC managed to help you here ; have same issue ?

[rrsstefano]

Hi all,

finally It seems that TAC was able to isolate the issue ti an  internal Bug.The fixed version 15.2(7)E1 should be released in middle of December 2019

We are waiting for...

I'll keep updated !!

Best Regards

Stefano

[Y C]

Can you share the bug id please?

[rrsstefano]

Hi all,

we installed the release suggested by TAC [ c2960x-universalk9-mz.152-7.E1.bin ] and for now all is working well...even if probably is too early to consider the problem ( devices in vlan 1 ) fixed, because in our experience this issue can appear randomically

Regarding the bug id I haven't it as it is considered an internal bug ( strange )

I'll keep updated 

Thanks