Hello Community  We are using Cisco 6509-E and wants to replace with Cisco 6503-E . The Cisco 6509  has  following inventory:-   #show module Mod Ports Card Type                              Model              Serial No. --- ----- -------------------------------------- ------------------ -----------   1   48  CEF720 48 port 10/100/1000mb Ethernet  WS-X6848-GE-TX     SSSS3   5    5  Supervisor Engine 2T 10GE w/ CTS (Acti VS-SUP2T-10G       SSSSSS   8   48  CEF720 48 port 1000mb SFP              WS-X6848-SFP       YYYY   9   20  DCEF2T 4 port 40GE / 16 port 10GE      WS-X6904-40G      YYYY #show power PS   Type               Watts   A @42V Status Status State ---- ------------------ ------- ------ ------ ------ ----- 1    WS-CAC-6000W       5771.64 137.42 OK     OK     on 2    WS-CAC-6000W       5771.64 137.42 OK     OK     on   My question is that could we use the same power supply on Cisco 6503-E chasis. I think so  we could not use this power supply but other line cards are compatible with Cisco 6503 with  VS-SUP2T-10G.    Welcome for further comments for module compatibilty for 6503 .    Regards   ... View more

Hallo All ,    we are using Nexus 7010 (having 4Port group) with the following inventory and three fex are attached with ProdcutionVDC by using 3 port-channel(4xPorts) with each module( 1/1-4, 2 /1-4, 3/1-4 ) respectively.    Could we configure these port-channel by using 2  ports from each module (like 1/1-2 or  2/1-2 or  3/1-2) for redundancy purposes for each fex.    Secondly could we also configure access port-channels by taking ports from different modules for redundancy purposes.     Thanks in advance for feedback.    admin# show module Mod  Ports  Module-Type                         Model              Status ---  -----  ----------------------------------- ------------------ ---------- 1    48     1/10 Gbps Ethernet Module           N7K-F248XP-25E     ok 2    48     1/10 Gbps Ethernet Module           N7K-F248XP-25E     ok 3    48     1/10 Gbps Ethernet Module           N7K-F248XP-25E     ok 5    0        Supervisor Module-2                       N7K-SUP2E               ha-standby 6    0        Supervisor Module-2                       N7K-SUP2E              active *  Mod  Sw              Hw ---  --------------  ------ 1    6.2(20)         1.0 2    6.2(20)         1.0 3    6.2(20)         1.0 5    6.2(20)         1.0 6    6.2(20)         1.0   show fex FEX FEX FEX FEX Number Description State Model Serial ------------------------------------------------------------------------ 102 FEX0102 Online N2K-C2232TM-E-10GE SSI1713021JY 104 FEX0104 Online N2K-C2232TM-E-10GE SSI171120B8H 105 FEX0105 Online N2K-C2232PP-10GE SSI1606031M  Regards   ... View more

Hello Team,   We are using Cisco Nexus 7000x4/5000x4(2 in each DC with VDC )  for fabric path  and VPC+ in  core block. Nexus 5k/fexes for access block.  Cisco 6509 is using for WAN connectivity.   Now we wants to replace all  Nexus 7000 from Core for cost cutting issues and simplifying network management.   As per my understanding we could use Cisco 5K with routing module for core part and it could be connected to existing 6509 for WAN connections.   As alternative we could use one Cisco Nexus 7K in core with existing FP/VPC+ and throw out one Nexus 7K from each data center.    Anyone could give me tehcnical opinon and thanks in advance.   WAHEED ... View more

Hello All ,    We are using multiple SVTI tunnels over EIGRP , we are facing issue for tunnels flapping . The log and configuration is mentioned below ;-   %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor srcaddr=Y.Y.y.y (Tunnel201) is up: new adjacency LINEPROV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=X:X:X:X, prot=50, spi=0xBF6B4869(3211479145), srcaddr=Y.Y.y.y input interface=Tunnel5555 %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=X:X:X:X, prot=50, spi=0xBF6B4869(3211479145), srcaddr=srcaddr=Y.Y.y.y , input interface=Tunnel5555 %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel5555, changed state to upTO-5-UPDOWN: Line protocol on Interface Tunnel5555, changed state to down %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor srcaddr=Y.Y.y.y (Tunnel5555) is down: interface down %CRYPTO-4-RECVD_PKT_IN %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.220.33 (Tunnel5555) is up: new adjacency %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is down: Interface PEER-TERMINATION received %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to up %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is up: new adjacency %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=srcaddr=Y.Y.y.y , prot=50, spi=0xB76360E1(3076743393), srcaddr=srcaddr=Y.Y.y.y , input interface=tun111 %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel5555, changed state to down %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.220.33 (Tunnel5555) is down: interface down %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=X:X:X:X, prot=50, spi=0x9240D2FE(2453721854), srcaddr=srcaddr=Y.Y.y.y , input interface=Tunnel5555 %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=X:X:X:X, prot=50, spi=0x9240D2FE(2453721854), srcaddr=2srcaddr=Y.Y.y.y , input interface=Tunnel5555 %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnel5555, changed state to up %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.220.33 (Tunnel5555) is up: new adjacency %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is down: holding time expired %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to up %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is up: new adjacency %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.220.33 (Tunnel5555) is down: Interface PEER-TERMINATION received %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.220.33 (Tunnel5555) is up: new adjacency %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is down: holding time expired %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to up %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is up: new adjacency %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to down %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is down: interface down CEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface tun111, changed state to up %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.111.170 (tun111) is up: new adjacency %IOSXE-3-PLATFORM:cpp_cp: QFP:0.0 Thread:001 TS:00003152843628822411 %IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 166, src_addrsrcaddr=Y.Y.y.y , dest_addr X:X:X:X, SPI 0xae75706a %DUAL-5-NBRCHANGE: EIGRP-IPv4 4: Neighbor 192.168.223.50 (Tunnel201) is down: holding time expired       nterface Tunnel11 bandwidth 2000 ip address 192.168.223.190 255.255.255.252 no ip redirects no ip proxy-arp ip accounting output-packets ip mtu 1350 ip tcp adjust-mss 1300 load-interval 30 keepalive 10 3 tunnel source xxxx tunnel mode ipsec ipv4 tunnel destination yyyyy tunnel protection ipsec profile prof-svti-prov-sec         ... View more

Hi Team,  Any one could guide me how to restore from this boot process  Current image running: Boot ROM0 Last reset cause: LocalSoft Cisco ISR4431/K9 platform with 4194304 Kbytes of main memory media drive bootflash: not present boot: error executing "boot bootflash:/isr4400-universalk9.03.13.08.S.154-3.S8-ext.SPA.bin" autoboot: boot failed, restarting... Initializing Hardware ... System integrity status: 00000610 Rom image verified correctly System Bootstrap, Version 15.4(3r)S, RELEASE SOFTWARE Copyright (c) 1994-2014 by cisco Systems, Inc. Current image running: Boot ROM0 Last reset cause: LocalSoft Cisco ISR4431/K9 platform with 4194304 Kbytes of main memory no valid BOOT image found Final autoboot attempt from default boot device... media drive bootflash: not present boot: cannot determine first file name on device "bootflash:" autoboot: boot failed, restarting... Initializing Hardware ... System integrity status: 00000610 Rom image verified correctly System Bootstrap, Version 15.4(3r)S, RELEASE SOFTWARE Copyright (c) 1994-2014 by cisco Systems, Inc. Current image running: Boot ROM0 Last reset cause: LocalSoft Cisco ISR4431/K9 platform with 4194304 Kbytes of main memory rommon 1 > ... View more

Hallo All ,    I am not not able to ping from vrf to external networks , anyone could guide me.  vrf definition lan ! address-family ipv4 exit-address-family ! vrf definition prov-pri ! address-family ipv4 exit-address-family ! vrf definition prov-sec ! address-family ipv4 exit-address-family ! ! ! interface FastEthernet0/0 vrf forwarding prov-pri ip address 13.13.13.1 255.255.255.0 duplex full ! interface FastEthernet1/0 vrf forwarding prov-sec ip address 12.12.12.1 255.255.255.0 duplex full ! interface FastEthernet2/0 vrf forwarding lan no ip address speed auto duplex auto ! interface FastEthernet2/0.100 encapsulation dot1Q 100 vrf forwarding lan ip address 192.168.100.1 255.255.255.0 ! interface FastEthernet2/0.200 encapsulation dot1Q 200 vrf forwarding lan ip address 192.168.200.1 255.255.255.0 R1# show ip vrf Name Default RD Interfaces lan <not set> Fa2/0 Fa2/0.100 Fa2/0.200 prov-pri <not set> Fa0/0 prov-sec <not set> Fa1/0   R1#show ip int brief Interface IP-Address OK? Method Status Protocol FastEthernet0/0 13.13.13.1 YES manual up up FastEthernet1/0 12.12.12.1 YES manual up up FastEthernet2/0 unassigned YES unset up up FastEthernet2/0.100 192.168.100.1 YES manual up up FastEthernet2/0.200 192.168.200.1 YES manual up up FastEthernet2/1 unassigned YES unset administratively down down R1#show run | sec ip rotue R1#show run | sec ip route ip route vrf lan 0.0.0.0 0.0.0.0 FastEthernet0/0 13.13.13.3 ip route vrf lan 0.0.0.0 0.0.0.0 FastEthernet1/0 12.12.12.2 20 ip route vrf lan 13.13.13.1 255.255.255.255 FastEthernet0/0 13.13.13.3 ip route vrf prov-pri 0.0.0.0 0.0.0.0 13.13.13.3 ip route vrf prov-sec 0.0.0.0 0.0.0.0 12.12.12.2 R1#show run | sec ip router R1#show run | sec router router eigrp 100 network 192.168.100.0 network 192.168.200.0 R1# R1#ping vrf prov-pri 13.13.13.3 source fast R1#ping vrf prov-pri 13.13.13.3 source fastEthernet 2/0.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.3, timeout is 2 seconds: Packet sent with a source address of 192.168.100.1 ..... Success rate is 0 percent (0/5) R1#ping vrf prov-pri 13.13.13.3 source fastEthernet 2/0.200 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.3, timeout is 2 seconds: Packet sent with a source address of 192.168.200.1 ..... Success rate is 0 percent (0/5) R1#ping vrf lan 192.168.100.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.100.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/7/32 ms R1#ping vrf lan 192.168.200.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.200.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/15/40 ms R1#ping vrf prov-pri 4.4.4.4 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/64/120 ms R1#ping vrf prov-sec 4.4.4.4 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/52/68 ms R1# R1#ping vrf prov-pri 13.13.13.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.3, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/27/36 ms R1#ping vrf prov-pri 13.13.13.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R1#ping vrf prov-sec 12.12.12.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 12.12.12.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms R1#ping vrf prov-sec 12.12.12.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 12.12.12.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/21/36 ms R1#ping vrf lan 13.13.13.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.1, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) R1#ping vrf lan 13.13.13.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 13.13.13.3, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) R1#ping vrf prov-sec 4.4.4.4 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 40/80/136 ms R1#ping vrf prov-pri 4.4.4.4 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 4.4.4.4, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 36/71/96 ms R1# With Regards   ... View more

Hallo All ,    I am trying to configure IKEV2 with SVTI but I am facing following error, could you guide me about that.  **************************************************** R4#show crypto ikev2 sa  IPv4 Crypto IKEv2  SA   Tunnel-id Local                 Remote                fvrf/ivrf            Status 1         192.168.2.4/500       192.168.12.1/500      none/none            IN-NEG       Encr: Unknown - 0, Hash: None, DH Grp:0, Auth sign: Unknown - 0, Auth verify: Unknown - 0       Life/Active Time: 86400/0 sec    IPv6 Crypto IKEv2  SA ****************************************************   R1#show crypto ikev2 sa  IPv4 Crypto IKEv2  SA   Tunnel-id Local                 Remote                fvrf/ivrf            Status 1         192.168.12.1/500      192.168.2.1/500       none/none            IN-NEG       Encr: Unknown - 0, Hash: None, DH Grp:0, Auth sign: Unknown - 0, Auth verify: Unknown - 0       Life/Active Time: 86400/0 sec    IPv6 Crypto IKEv2  SA       **************************************************** R1#show running-config | sec crypto crypto ikev2 proposal IKEv2_PROPOSAL  encryption aes-cbc-256 aes-cbc-192 3des  integrity sha512 sha256 md5  group 14 5 2 crypto ikev2 policy IKEv2_POLICY  match fvrf any  proposal IKEv2_PROPOSAL crypto ikev2 keyring IKEv2_KEYRING  peer R4   address 192.168.2.1   pre-shared-key local cisco   pre-shared-key remote cisco  ! crypto ikev2 profile IKEv2_PROFILE  match identity remote address 192.168.2.1 255.255.255.255  identity local address 192.168.12.1  authentication remote pre-share  authentication local pre-share  keyring local IKEv2_KEYRING crypto ikev2 fragmentation mtu 100 crypto ipsec transform-set IPSEC_TRANSFORM1 esp-aes 256 esp-sha512-hmac  mode tunnel crypto ipsec profile IPSEC_PROFILE  set transform-set IPSEC_TRANSFORM1  set ikev2-profile IKEv2_PROFILE **************************************************** R4#show running-config | sec crypto crypto ikev2 proposal IKEv2_PROPOSAL  encryption aes-cbc-256 aes-cbc-192 3des  integrity sha512 sha256 md5  group 14 5 2 crypto ikev2 policy IKEv2_POLICY  match fvrf any  proposal IKEv2_PROPOSAL crypto ikev2 keyring IKEv2_KEYRING  peer R1   address 192.168.12.1   pre-shared-key local cisco   pre-shared-key remote cisco  ! crypto ikev2 profile IKEv2_PROFILE  match identity remote address 192.168.12.1 255.255.255.255  identity local address 192.168.2.1  authentication remote pre-share  authentication local pre-share  keyring local IKEv2_KEYRING crypto ikev2 fragmentation mtu 100 crypto ipsec transform-set IPSEC_TRANSFORM1 esp-aes 256 esp-sha512-hmac  mode tunnel crypto ipsec profile IPSEC_PROFILE  set transform-set IPSEC_TRANSFORM1  set ikev2-profile IKEv2_PROFILE ****************************************************     With Regards. Waheed         ... View more

Hallo Guys,  I need some assistance regarding VPN user authentication with Cisco ASA .  Is it possible that VPN user will authenticate locallly but his password will be verified from LDAP Server .  Regards ... View more

Hi Team ,   I want to make stacking with 4xSwitches , can you see the attached cable layout for stacking . Please share me the stack configuration template .     We are using 2 x WS-C3850-24T     and 2x WS-C3850-12XS    with the following IOS Version for stacking .     Switch Ports Model              SW Version        SW Image              Mode ------ ----- -----              ----------        ----------            ---- *    1 32    WS-C3850-24T       03.06.06E         cat3k_caa-universalk9 INSTALL     Switch Ports Model              SW Version        SW Image              Mode ------ ----- -----              ----------        ----------            ---- *    1 16    WS-C3850-12XS      03.07.04E         cat3k_caa-universalk9 INSTALL With Regards ... View more

Hi Team,  I want to migrate HP 2510 to Cisco 2900 series . I need your support regarding 802.1x implementation for Cisco  2960 and we have Microsoft NSP for dot1x.   Could anyone guide me further about it and I prepared the following template :- Existing HP Procure Configuration aaa authentication port-access eap-radius aaa accounting network start-stop radius radius-server key rad4procurve radius-server host 10.32.10.1 port-security 1 learn-mode port-access port-security 2 learn-mode port-access port-security 3 learn-mode port-access port-security 4 learn-mode port-access aaa port-access authenticator 1-20 aaa port-access authenticator 1 reauth-period 7200 aaa port-access authenticator 1 unauth-vid 12 aaa port-access authenticator 1 client-limit 2 aaa port-access authenticator 2 reauth-period 7200 aaa port-access authenticator 2 unauth-vid 12 aaa port-access authenticator 2 client-limit 2 aaa port-access authenticator 3 reauth-period 7200 aaa port-access authenticator 3 unauth-vid 12 aaa port-access authenticator 3 client-limit 2 aaa port-access authenticator 4 reauth-period 7200 aaa port-access authenticator 4 unauth-vid 12 aaa port-access authenticator 4 client-limit 2 aaa port-access authenticator active Cisco 2960 Configuration  radius-server host 10.32.10.1 key rad4procurve address ipv4 10.32.10.1 auth-port 1812 acct-port 1813 timeout 10 retransmit 5 !   ip radius source-interface Loopback0 aaa authentication dot1x default group ISE_GROUP aaa authorization network default group ISE_GROUP aaa accounting update newinfo aaa accounting dot1x default start-stop group ISE_GROUP ! radius-server attribute 6 on-for-login-auth radius-server attribute 8 include-in-access-req radius-server attribute 25 access-request include radius-server dead-criteria time 65 radius-server deadtime 1 authentication mac-move permit authentication logging verbose access-session template monitor ! mab logging verbose ! ! dot1x system-auth-control dot1x logging verbose device-sensor accounting device-sensor notify all-changes ! ! Ip device tracking ip device tracking probe delay 10 ! interface range gigabitEthernet XYZ description XXXXX switchport access vlan XXXX switchport mode access authentication control-direction in authentication host-mode multi-domain authentication order mab dot1x authentication priority dot1x mab authentication port-control auto authentication violation replace authentication open mab no snmp trap link-status dot1x pae authenticator dot1x timeout quiet-period 300 dot1x timeout tx-period 5 dot1x timeout ratelimit-period 300 no shut ! ################################ dot1x###################### ... View more

Hi Team,  I want to migrate HP 2510 to Cisco 2900 series . I need your support regarding 802.1x implementation for Cisco  2960 and we have Microsoft NSP for dot1x.   Could anyone guide me further about it and I prepared the following template :- Existing HP Procure Configuration aaa authentication port-access eap-radius aaa accounting network start-stop radius radius-server key rad4procurve radius-server host 10.32.10.1 port-security 1 learn-mode port-access port-security 2 learn-mode port-access port-security 3 learn-mode port-access port-security 4 learn-mode port-access aaa port-access authenticator 1-20 aaa port-access authenticator 1 reauth-period 7200 aaa port-access authenticator 1 unauth-vid 12 aaa port-access authenticator 1 client-limit 2 aaa port-access authenticator 2 reauth-period 7200 aaa port-access authenticator 2 unauth-vid 12 aaa port-access authenticator 2 client-limit 2 aaa port-access authenticator 3 reauth-period 7200 aaa port-access authenticator 3 unauth-vid 12 aaa port-access authenticator 3 client-limit 2 aaa port-access authenticator 4 reauth-period 7200 aaa port-access authenticator 4 unauth-vid 12 aaa port-access authenticator 4 client-limit 2 aaa port-access authenticator active Cisco 2960 Configuration  radius-server host 10.32.10.1 key rad4procurve address ipv4 10.32.10.1 auth-port 1812 acct-port 1813 timeout 10 retransmit 5 ! ip radius source-interface Loopback0 aaa authentication dot1x default group ISE_GROUP aaa authorization network default group ISE_GROUP aaa accounting update newinfo aaa accounting dot1x default start-stop group ISE_GROUP ! radius-server attribute 6 on-for-login-auth radius-server attribute 8 include-in-access-req radius-server attribute 25 access-request include radius-server dead-criteria time 65 radius-server deadtime 1 authentication mac-move permit authentication logging verbose access-session template monitor ! mab logging verbose ! ! dot1x system-auth-control dot1x logging verbose device-sensor accounting device-sensor notify all-changes ! ! Ip device tracking ip device tracking probe delay 10 ! interface range gigabitEthernet XYZ description XXXXX switchport access vlan XXXX switchport mode access authentication control-direction in authentication host-mode multi-domain authentication order mab dot1x authentication priority dot1x mab authentication port-control auto authentication violation replace authentication open mab no snmp trap link-status dot1x pae authenticator dot1x timeout quiet-period 300 dot1x timeout tx-period 5 dot1x timeout ratelimit-period 300 no shut ! ################################ dot1x###################### ... View more