03-15-2022 02:34 AM
I configure 802.1x authencation in cisco 3750 switch,and the client authencates success
mac address 041d.c71f.1699 is authenticated success,but 041d.c71f.1698 is not authenticated, the packet with destination mac 041d.c71f.1698 flows normally.
how to make the packet with no authenticated mac discard by switch ? for example , packt with mac 041d.c71f.1698 is discard by switch,because it's mac is not authenticaed.
03-15-2022 06:03 AM
how is your port configuration look like ? is this port connected 2 devices ?
03-15-2022 05:54 PM
Thank your for your support and feedback!
my configuration is as below
aaa new-model
aaa authentication dot1x default group radius
dot1x system-auth-control
radius-server host 10.232.45.14 auth-port 1812 acct-port 1813 key 7 010703174F020808
cisco-A20911954#show running-config interface gigabitEthernet1/0/18
Building configuration...
Current configuration : 196 bytes
!
interface GigabitEthernet1/0/18
switchport trunk encapsulation dot1q
switchport mode trunk
authentication host-mode multi-host
authentication port-control auto
dot1x pae authenticator
end
this port connects one device, my device is a base station .
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide