About MH311x

MH311x · 05-08-2022

Hello everybody!I am experiencing an unusual behavior in our network. Unfortunetely I have no idea what could cause this problem. We are using Dyamic ARP Inspection on most of our VLANs. Since 7 days there are several clients (on different sites) whi...

MH311x · 01-13-2022

Hi community, I am a little bit confused about configuring HSRP on two sites (two different buildings). We have two core switches placed in two different buildings, which are connected through a layer 2 MPLS connection.We have to realize a scenario,...

MH311x · 12-29-2021

Hi there!We are facing some issues when trying to implement 802.1X on our Cisco IP phones.The authentication of the phone is successful, an authentication session is created on the switch, everything seems fine.Unfortunetaly the phone isn't able to r...

MH311x · 10-04-2021

Hi community, I am facing some problems understanding some aspects of ACLs. Question 1Our infrastructure is routed via SVIs on a layer 3 switch. I have already configured an ACL to prevent users from using telnet & ssh. Extended IP access list DENY_T...

MH311x · 09-28-2021

Hi there, I am facing some problems when implementing 802.1X in my environment (Catalyst 2960x). 802.1X is working fine so far and the config should be right. But sometimes, the switch is trying to authenticate the Cisco Phone and not the windows cli...

MH311x · 05-09-2022

@balaji.bandi the problem appears on different models. Our most used devices are C2960X running on 15.2.(7)E4.But e.g. also on an old Catalyst 4506-E. I could try to capture the ARP packets, but it will be a little bit tricky since this doesnt occur ...

MH311x · 12-30-2021

When including the string after authentication, DHCP works fine. Thanks @Rob Ingram!

MH311x · 12-29-2021

@Rob Ingram no, I haven't. I have read about this, but thought this was only needed when using the multi domain mode.Unfortunately we are not using ISE as radius server, so I'm not sure how to configure the RADIUS to include the string, but I will do...

MH311x · 10-05-2021

@Rickey526 Which issue do you mean exactly? The ACLs are working the way they should be ... I am just having a hard time understanding the reason for placing the ACL outbound in the server-vlan.

MH311x · 09-29-2021

@Rob Ingram That doesn't solve the problem, because I want to authenticate the phone via MAB and the PC via 802.1X.When configuing authentication host-mode multi-domain, the phone is also authenticated via 802.1X. I tried to configure the following n...

Member Since	‎04-23-2021 07:53 AM
Date Last Visited	‎05-25-2022 12:02 AM
Posts	15
Total Helpful Votes Received	30

User Statistics

User Activity

Unusual ARP packets from clients

Question about HSRP over 2 physical locations

IP phones don't get an IP-address with 802.1X

Some questions about ACLs

802.1X trying to authenticate phone, not client

Re: Unusual ARP packets from clients

Re: IP phones don't get an IP-address with 802.1X

Re: IP phones don't get an IP-address with 802.1X

Re: Some questions about ACLs

Re: 802.1X trying to authenticate phone, not client