I have same problem but on 3650 version Cisco IOS Software [Everest], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 16.6.6, RELEASE SOFTWARE (fc1) ... View more

the problem repeats every day, I have to disconnect the devices and they are reachable again ... View more

I ran the update, and it looks like everything works for the dot1x part. I noticed that the problem of unreachability of the printer after one day seems to be solved by removing port security on the port configuration. Isn't that these firmware have a system that hides doors that don't do traffic? ... View more

I think it's better to go back to the everest version, if anything I will update it from 16.6.5 to 16.6.6. At least I had no problems with 8021x, but I had problems reaching it after a day. ... View more

I did, if you look at the last message it is the sh mac address and the strange thing is that the mac of the phone is seen on two vlan, the vlan 192 is that of the phones. ... View more

Vlan Mac Address Type Ports ---- ----------- -------- ----- 192 001e.135c.8958 STATIC Gi3/0/41 246 001e.135c.8958 DYNAMIC Drop Total Mac Addresses for this criterion: 2 Giallo_5# May 7 13:01:43.154: %DOT1X-5-FAIL:Switch 1 R0/0: smd: Authentication failed for client (001E.135C.8958) on Interface Gi3/0/41 AuditSessionID 0AB0BC65000038819262006F why give me 2 times the mac address of the phone? ... View more

interface GigabitEthernet3/0/41 description "PC e SoftPhone" switchport access vlan 246 switchport mode access switchport voice vlan 192 authentication event fail action authorize vlan 30 authentication event server dead action authorize vlan 246 authentication event no-response action authorize vlan 30 authentication order dot1x authentication port-control auto dot1x pae authenticator dot1x timeout tx-period 15 dot1x timeout auth-period 40 spanning-tree portfast spanning-tree bpduguard enable     Giallo_5#show port-security int gi3/0/41 Port Security : Disabled Port Status : Secure-down Violation Mode : Shutdown Aging Time : 0 mins Aging Type : Absolute SecureStatic Address Aging : Disabled Maximum MAC Addresses : 1 Total MAC Addresses : 0 Configured MAC Addresses : 0 Sticky MAC Addresses : 0 Last Source Address:Vlan : 001e.135c.8958:192 Security Violation Count : 0 ... View more

ok but the problem of security violation happens even without port security ... View more

these are the mac addresses that you see on the interface. the phone is seen twice, in the other version I did not have this symptom Vlan Mac Address Type Ports ---- ----------- -------- ----- 192 001e.135c.8958 DYNAMIC Gi3/0/41 246 001e.135c.8958 DYNAMIC Gi3/0/41 246 d8cb.8a8e.72ec DYNAMIC Gi3/0/41 ... View more

I updated the switches to the denali version, I immediately had problems with 802.1x, so I had to disable it from the ports. The customer obviously wants this kind of security, so I ask you to help me, below the error messages May 7 11:34:54.230: %PM-4-ERR_DISABLE: security-violation error detected on Gi3/0/41, putting Gi3/0/41 in err-disable state May 7 11:34:54.238: %AUTHMGR-5-SECURITY_VIOLATION: Security violation on the interface GigabitEthernet3/0/41, new MAC address (d8cb.8a8e.72ec) is seen.AuditSessionID Unassigned May 7 11:34:55.232: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet3/0/41, changed state to down also removing the port security the messages appear the same ... View more

I am sure that it is not the wisest thing to update almost 60 switches now. there must be a solution to this problem. ... View more

I have a syslog server, besides the ports that go down and then up, I don't have any other logs. The spanning tree has not changed. Is the software you recommended me totally free? Do you have a guide to install it? I stayed behind at 3750 ahahhahaha ... View more

Not yet, which version should I install? the current one is the recommended one ... View more

I have attached two screenshots of an interface where a network hard disk is connected, which was no longer reachable this morning. I did show arp on the cores, the show mac address on the port where he is connected, I forgot to do a show interface, but I assure you that the state would be UP / UP ... View more

Is it normal that some ARP results have different time on the two cores? ... View more