cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2871
Views
0
Helpful
0
Replies

show dot1x interface detail has not more 'port status =' on C3650

JAN DEVOS
Level 1
Level 1

Hello,

We notice the following difference on C3750 and C3650

 

C3750

Dot1x Info for FastEthernet1/0/3
-----------------------------------
PAE                       = AUTHENTICATOR
PortControl               = AUTO
ControlDirection          = Both
HostMode                  = MULTI_AUTH
QuietPeriod               = 60
ServerTimeout             = 0
SuppTimeout               = 600
ReAuthMax                 = 2
MaxReq                    = 2
TxPeriod                  = 600

Dot1x Authenticator Client List
-------------------------------
Supplicant                = c81f.662a.7474
Session ID                = 0A01C81F000064BC9D9482F9
    Auth SM State         = AUTHENTICATED
    Auth BEND SM State    = IDLE
Port Status               = AUTHORIZED

Supplicant                = 0007.3bc8.ac63

Session ID                = 0A01C81F00003B6DEDC33682
    Auth SM State         = AUTHENTICATED
    Auth BEND SM State    = IDLE
Port Status               = AUTHORIZED

On C3650, the same command gives a shorter reply, and no more port status.  Can you explain why?  And how to apply the C3750 troubleshoot process on C3650, in the absence of Port Status =

Dot1x Info for GigabitEthernet1/0/4
-----------------------------------
PAE                       = AUTHENTICATOR
QuietPeriod               = 60
ServerTimeout             = 0
SuppTimeout               = 600
ReAuthMax                 = 2
MaxReq                    = 2
TxPeriod                  = 600

Dot1x Authenticator Client List
-------------------------------
EAP Method                = PEAP
Supplicant                = f04d.a231.fce9
Session ID                = 0A01C8840000013C74787098
    Auth SM State         = AUTHENTICATED
    Auth BEND SM State    = IDLE

EAP Method                = MD5
Supplicant                = 0007.3bc8.a9a9
Session ID                = 0A01C8840000001C22CA8772
    Auth SM State         = AUTHENTICATED

    Auth BEND SM State    = IDLE

Nevertheless, the configuration guide of the C3650 still shows the STATUS =  as being in.

Excerpt below from http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/3650/sec-user-8021x-xe-3se-3650-book/config-ieee-802x-pba.html

Device# show dot1x interface fastethernet7/1 details

Dot1x Info for FastEthernet7/1
-----------------------------------
PAE                       = AUTHENTICATOR
PortControl               = AUTO
ControlDirection          = Both
HostMode                  = SINGLE_HOST
ReAuthentication          = Disabled
QuietPeriod               = 60
ServerTimeout             = 30
SuppTimeout               = 30
ReAuthPeriod              = 3600 (Locally configured)
ReAuthMax                 = 2
MaxReq                    = 2
TxPeriod                  = 30
RateLimitPeriod           = 0
Dot1x Authenticator Client List
-------------------------------
Supplicant                = 1000.0000.2e00
        Auth SM State     = AUTHENTICATED
        Auth BEND SM Stat = IDLE
Port Status               = AUTHORIZED
         
Authentication Method     = Dot1x
Authorized By             = Authentication Server
Vlan Policy               = N/A

 

Tx.

Version info:

C3650 = 03.06.04.E

C3750 = 12.2(55)SE6

0 Replies 0