Is the MAC address configured in the ACS NAP configured for MAB?

Can you paste your AAA config.

With regards
Kings

On Tue, May 1, 2012 at 7:49 AM, Eugene Pefti <[email protected]>wrote:

>  Folks,****
>
> Anyone can give me a clue why the switch reports the status of the port
> configured for MAC authentication bypass as “UNAUTHORIZED” ?****
>
> Based on the output below the authorization session succeeded but the
> summary for dot1x says it is unauthorized. Is it expected ?****
>
> ** **
>
> .May  1 02:25:34.108: %AUTHMGR-5-START: Starting 'mab' for client
> (0015.f956.e389) on Interface Fa0/2 AuditSessionID 0A000008000000368C2CD8E4
> ****
>
> .May  1 02:25:34.142: %MAB-5-SUCCESS: Authentication successful for client
> (0015.f956.e389) on Interface Fa0/2 AuditSessionID 0A000008000000368C2CD8E4
> ****
>
> .May  1 02:25:34.142: %AUTHMGR-7-RESULT: Authentication result 'success'
> from 'mab' for client (0015.f956.e389) on Interface Fa0/2 AuditSessionID
> 0A000008000000368C2CD8E4****
>
> .May  1 02:25:34.142: %AUTHMGR-5-VLANASSIGN: VLAN 30 assigned to Interface
> Fa0/2 AuditSessionID 0A000008000000368C2CD8E4****
>
> .May  1 02:25:34.645: %AUTHMGR-5-SUCCESS: *Authorization succeeded for
> client (0015.f956.e389) on Interface Fa0/2* AuditSessionID
> 0A000008000000368C2CD8E4****
>
> .May  1 02:25:35.174: %LINEPROTO-5-UPDOWN: Line protocol on Interface
> FastEthernet0/2, changed state to up****
>
> ** **
>
> SW2#sh dot1x all sum****
>
> Interface       PAE     Client          Status          ** **
>
> --------------------------------------------------------****
>
> Fa0/2           AUTH    none            *UNAUTHORIZED*****
>
> Fa0/5           AUTH    001d.72e2.634c  AUTHORIZED****
>
> ** **
>
> Eugene****
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to