WS-C3850 upgrade to 16.3.6 from 3.6.3

[sdawson35]

Apologies if this is in the wrong  - this new layout is not the most intuitive.

We have upgraded a stack of 3850 switches to 16.3.6 from 3.6.3 where we used 802.1x for authenticating workstations attaching to the network.

After the upgrade there are no 802.1x options any more , how do we get 802.1x back or does the Denali image no longer support it ?

For reference pre upgrade the switchport config looked like this

authentication control-direction in
 authentication host-mode multi-auth
 authentication timer inactivity 60
 dot1x pae authenticator
 dot1x timeout quiet-period 65535
 dot1x timeout tx-period 65535
 dot1x timeout supp-timeout 65535
 dot1x max-req 1

After the upgrade you do not even get the options

(config-if)#auth
                      ^
% Invalid input detected at '^' marker.

(config-if)#dot
                    ^
% Invalid input detected at '^' marker.

Regards

[andresfr]

Do you have the following command configured globally?

configure terminal

  dot1x system-auth-control

  end

!

Is AAA also enabled on the switch?

Please refer to:

 Configuring IEEE 802.1x Port-Based Authentication (Catalyst 3850 - 16.3.x)

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-3/configuration_guide/b_163_consolidated_3850_cg/b_163_consolidated_3850_cg_chapter_01101101.html?bookSearch=true

Regards,