DOT1X_SWITCH-5-ERR_ADDING_ADDRESS after enabling 802.1x on switch 3550

[kiran kumar Chamakura]

Hi Experts,

We have been facing issues with the  Error  (%DOT1X_SWITCH-5-ERR_ADDING_ADDRESS), after enabling 802.1x on switch 3550 ,

After working on the Error we have found in blogs to do the following.

Resolution

Reference Link: https://supportforums.cisco.com/docs/DOC-5124

If this message appears only once, then this can be ignored.

In  order to resolve this issue, if the hardware is full, remove some  Dynamic addresses with the clear mac address-table command, which are  automatically added to the address table and dropped from it when they  are not in use.

If the supplicant address is secured on another port, manually remove it from that port with the clear port-security command.

Even though we clear the mac address-table and remove it from that port with the clear port-security still the problem exist, the only solution which is working is by re-boot the switch, by doing this other user are getting effected i.e. down time till the switch re-boot.

Request you to please help us on this to resolve with out any re-boot.

Switch Details:

Model number: WS-C3550-48-SMI

IOS Image: c3550-ipservicesk9-mz.122-44.SE6.bin

C3550 Software: C3550-IPSERVICESK9-M

Error: %DOT1X_SWITCH-5-ERR_ADDING_ADDRESS

Flash Details:

15998976 bytes total (6264320 bytes free)

[acampbell]

Hi,

This is from the Error message decoder.

Showing 1-2 of 2 results

Page: 1

1. %DOT1X_SWITCH-5-ERR_ADDING_ADDRESS: Unable to add address %e on %s The authenticated host's address could not be added. This is probably because either the TCAM is full or the address exists as a secure address on another port. Recommended Action: If the TCAM is full, clear some dynamic addresses to make room for the host's address. If the host's address is secured on another port, manually remove it from that port. Related documents- No specific documents apply to this error message.

2. %DOT1X_SWITCH-5-ERR_ADDING_ADDRESS: Unable to add address [enet] on [chars] The supplicant MAC address could not be added because the hardware is full, or the address exists as a secure address on another port. [enet] is the supplicant MAC address, and [chars] is the interface. Recommended Action: If the hardware is full, remove some dynamic addresses. If the supplicant address is secured on another port, manually remove it from that port. Related documents- No specific documents apply to this error message.

So it looks like you may have the address in question locked in port security

From the config guide for 3550/12.2.44SE

http://www.cisco.com/en/US/docs/switches/lan/catalyst3550/software/release/12.2_44_se/configuration/guide/swtrafc.html#wp1038501

To free addresses from security

Issue these commands from the interface config

To disable sticky learning on an interface, use the no switchport port-security mac-address sticky interface configuration command. The interface converts the sticky secure MAC addresses to dynamic secure addresses.

To delete a static secure MAC address from the address table, use the clear port-security configured address mac-address privileged EXEC command. To delete all the static secure MAC addresses on an interface or a VLAN, use the clear port-security configured interface interface-id privileged EXEC command.

To delete a dynamic secure MAC address from the address table, use the clear port-security dynamic address mac-address privileged EXEC command. To delete all the dynamic addresses on an interface or a VLAN, use the clear port-security dynamic interface interface-id privileged EXEC command.

To delete a sticky secure MAC addresses from the address table, use the clear port-security sticky address mac-address privileged EXEC command. To delete all the sticky addresses on an interface or a VLAN, use the clear port-security sticky interface interface-id privileged EXEC command.

Regards,
Alex.
Please rate useful posts.

[kiran kumar Chamakura]

Hi Alex,

Firstly i want to thanks you for your reply, We will follow the same once we get the same Error once again and will update you if we have any Issues.

Thanks and Regards

Kiran Kumar CH