I had this same issue... there is supposedly an IOS release at the end of the 
month that will fix this issue. I am having the same issue. I took the snmp 
linkdown part out for now and it works fine as long as no one person plugs into 
a different port with the same PC of course. Our problem is isolated to one 
Dorm with only two ports in each room. I have instructed the Help Desk to let 
the students know if it does not work to plug into the other port that they 
first got Auth'd in until the released IOS update can be applied. So far I have 
not had any issues.

From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of David Maas
Sent: Monday, September 21, 2009 11:34 AM
To: [email protected]
Subject: Re: Switch Update and Link-Down Messages

What version of IOS is running on the 3750's now and before?

________________________________
From: Cisco Clean Access Users and Administrators 
[mailto:[email protected]] On Behalf Of King, Ronald A.
Sent: Monday, September 21, 2009 11:25 AM
To: [email protected]
Subject: Switch Update and Link-Down Messages
This weekend, our network team did an update to the 3750 switches NAC (4.6.1) 
is controlling.  Now users are authenticating, moved to the temporary role and 
assessed, pass the assessment, moved to out of band.  All appears to be working 
normally.  About a second later, we get a "Received Link-Down trap from switch" 
for the same port, starting the whole process over, effectively putting the 
user into a loop.

Anyone seen this?  Have ideas on how to solve it?

Ronald King
Security Engineer
Norfolk State University
Marie V. McDemmond Center for Applied Research
Suite 401
700 Park Ave.
Norfolk, Virginia  23504
Phone:  757-823-3918
Fax: 757-823-2128
Email: [email protected]<mailto:[email protected]>
http://security.nsu.edu

Reply via email to