H3C S5500V2-34S-EI 启用dot1x认证后，仅有个别端口可以认证，其他端口认证失败

您好已回复帮看下

检查下接口和全局下有没有都使能1x认证

这是全局的配置： clock protocol none # telnet server enable # irf mac-address persistent timer irf auto-update enable undo irf link-delay irf member 1 priority 1 # dot1x authentication-method eap dot1x timer tx-period 10 dot1x access-user log enable abnormal-logoff failed-login normal-logoff successful-login 接口的配置如下，在单独配置dot1x并回车时报错 [Hx-A7_2F_H3C-GigabitEthernet1/0/9]dis thi # interface GigabitEthernet1/0/9 port link-mode bridge description S1224-8 port access vlan 11 stp edged-port undo dot1x handshake dot1x mandatory-domain 1x-domain undo dot1x multicast-trigger dot1x unicast-trigger dot1x guest-vlan 11 dot1x auth-fail vlan 13 mac-authentication domain gz_radius mac-authentication timer auth-delay 15 undo mac-authentication offline-detect enable port-security port-mode userlogin-secure-or-mac-ext # return [Hx-A7_2F_H3C-GigabitEthernet1/0/9]dot1x Can't enable 802.1X for port security is enabled. [Hx-A7_2F_H3C-GigabitEthernet1/0/9] [Hx-A7_2F_H3C-GigabitEthernet1/0/19]dis thi # interface GigabitEthernet1/0/19 port link-mode bridge port access vlan 13 stp edged-port # return [Hx-A7_2F_H3C-GigabitEthernet1/0/19]dot1x Can't enable 802.1X for port security is enabled. [Hx-A7_2F_H3C-GigabitEthernet1/0/19]

所有配置一致，同一个vlan，在该交换机接口上抓包显示，只有start报文，没回给pc 这是9口本机（745d-229d-84b9）点击客户端认证后交换机的提示的debugg信息 *Nov 17 10:09:43:241 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 *Nov 17 10:09:43:446 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 *Nov 17 10:09:43:743 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 *Nov 17 10:09:45:106 2024 Hx-A7_2F_H3C DOT1X/7/EVENT: BE is in Idle state: UserMAC=9897-cc6c-ca02, VLANID=11, Interface=GigabitEthernet1/0/2. *Nov 17 10:09:45:106 2024 Hx-A7_2F_H3C DOT1X/7/EVENT: PAE is in Aborting state: UserMAC=9897-cc6c-ca02, VLANID=11, Interface=GigabitEthernet1/0/2. *Nov 17 10:09:45:106 2024 Hx-A7_2F_H3C DOT1X/7/EVENT: BE is in Initialize state: UserMAC=9897-cc6c-ca02, VLANID=11, Interface=GigabitEthernet1/0/2. *Nov 17 10:09:45:106 2024 Hx-A7_2F_H3C DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=9897-cc6c-ca02, VLANID=11, Interface=GigabitEthernet1/0/2. *Nov 17 10:09:45:106 2024 Hx-A7_2F_H3C DOT1X/7/EVENT: BE is in Idle state: UserMAC=9897-cc6c-ca02, VLANID=11, Interface=GigabitEthernet1/0/2. *Nov 17 10:09:45:107 2024 Hx-A7_2F_H3C DOT1X/7/EVENT: Interface GigabitEthernet1/0/2 received Set the port authorization status to unauthorized event. *Nov 17 10:09:48:508 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 *Nov 17 10:09:48:804 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 *Nov 17 10:09:49:065 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 *Nov 17 10:09:54:080 2024 Hx-A7_2F_H3C DOT1X/7/PACKET: Received a packet on interface GigabitEthernet1/0/9. Destination Mac Address=0180-c200-0003 Source Mac Address=745d-229d-84b9 Mac Frame Type=888e Protocol Version ID=1 Packet Type=1 Packet Length=0 undo de all All possible debugging has been turned off. <Hx-A7_2F_H3C> 日志信息如下172.20.32.3是本机ip地址，目前本机接的9口 Current messages: 303 %Nov 17 09:58:49:106 2024 Hx-A7_2F_H3C DOT1X/6/DOT1X_LOGOFF_ABNORMAL: -IfName=GigabitEthernet1/0/2-MACAddr=244b-fe07-746f-VLANID=11-Username=term_c60d6d57-e17d-4361-9825-b86b6660a726-ErrCode=9; 802.1X user was logged off abnormally. %Nov 17 09:57:56:433 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis logbuffer reverse %Nov 17 09:57:45:073 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis logbuffer reverse %Nov 17 09:57:15:828 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis logbuffer %Nov 17 09:57:05:819 2024 Hx-A7_2F_H3C CFGMAN/5/CFGMAN_EXIT_FROM_CONFIGURE: -Line=vty0-IPAddr=172.20.32.3-User=admin; Exit from the system view or a feature view to the user view. %Nov 17 09:57:05:819 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is qui %Nov 17 09:56:59:601 2024 Hx-A7_2F_H3C DOT1X/6/DOT1X_LOGIN_SUCC: -IfName=GigabitEthernet1/0/2-MACAddr=244b-fe07-746f-AccessVLANID=11-AuthorizatiOnVLANID=11-Username=term_c60d6d57-e17d-4361-9825-b86b6660a726; User passed 802.1X authentication and came online. %Nov 17 09:56:47:093 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is qui %Nov 17 09:56:46:019 2024 Hx-A7_2F_H3C SHELL/4/SHELL_CMD_MATCHFAIL: -User=admin-IPAddr=172.20.32.3; Command exi in view GigabitEthernet1/0/9 failed to be matched. %Nov 17 09:49:53:830 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is port acc vlan 11 %Nov 17 09:49:27:392 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis thi %Nov 17 09:49:25:508 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is undo dot1x handshake %Nov 17 09:48:47:430 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis thi %Nov 17 09:48:45:700 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is port acc vlan 12 %Nov 17 09:48:40:669 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis thi %Nov 17 09:48:39:064 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is int gi1/0/9 %Nov 17 09:48:02:284 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis thi %Nov 17 09:48:00:008 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is int gi1/0/15 %Nov 17 09:47:40:362 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis thi %Nov 17 09:47:39:309 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is int GigabitEthernet 1/0/9 %Nov 17 09:45:24:350 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis dot1x sessions %Nov 17 09:45:17:315 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is undo mac-address dynamic 745d-229d-84b9 int GigabitEthernet 1/0/15 vlan 12 %Nov 17 09:45:12:834 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is undo mac-address dynamic 745d-229d-84b9 int GigabitEthernet 1/0/15 vlan 11 %Nov 17 09:44:55:163 2024 Hx-A7_2F_H3C SHELL/4/SHELL_CMD_MATCHFAIL: -User=admin-IPAddr=172.20.32.3; Command undo mac-address dynamic 745d-229d-84b9 int GigabitEthernet 1/0/15 in view system failed to be matched. %Nov 17 09:43:18:324 2024 Hx-A7_2F_H3C SHELL/4/SHELL_CMD_MATCHFAIL: -User=admin-IPAddr=172.20.32.3; Command conf t in view system failed to be matched. %Nov 17 09:43:15:360 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is sys %Nov 17 09:43:10:945 2024 Hx-A7_2F_H3C LLDP/6/LLDP_CREATE_NEIGHBOR: Nearest bridge agent neighbor created on port GigabitEthernet1/0/2 (IfIndex 2), neighbor"s chassis ID is 244b-fe07-746f, port ID is 244b-fe07-746f. %Nov 17 09:42:34:429 2024 Hx-A7_2F_H3C SHELL/6/SHELL_CMD: -Line=vty0-IPAddr=172.20.32.3-User=admin; Command is dis dot1x sessions %Nov 17 09:42:27:122 2024 Hx-A7_2F_H3C SHELL/5/SHELL_LOGIN: admin logged in from 172.20.32.3. %Nov 17 09:41:52:849 2024 Hx-A7_2F_H3C IFNET/5/LINK_UPDOWN: Line protocol state on the interface GigabitEthernet1/0/9 changed to up. %Nov 17 09:41:52:847 2024 Hx-A7_2F_H3C IFNET/3/PHY_UPDOWN: Physical state on the interface GigabitEthernet1/0/9 changed to up. %Nov 17 09:38:07:466 2024 Hx-A7_2F_H3C SHELL/5/SHELL_LOGOUT: admin logged out from 192.168.2.6. %Nov 17 09:37:33:106 2024 Hx-A7_2F_H3C DOT1X/6/DOT1X_LOGOFF_ABNORMAL: -IfName=GigabitEthernet1/0/2-MACAddr=244b-fe07-746f-VLANID=11-Username=term_c60d6d57-e17d-4361-9825-b86b6660a726-ErrCode=9; 802.1X user was logged off abnormally. %Nov 17 09:36:07:405 2024 Hx-A7_2F_H3C SHELL/5/SHELL_LOGIN: admin logged in from 192.168.2.6. %Nov 17 09:36:01:421 2024 Hx-A7_2F_H3C SHELL/5/SHELL_LOGOUT: admin logged out from 172.20.32.3. %Nov 17 09:35:56:309 2024 Hx-A7_2F_H3C DOT1X/6/DOT1X_LOGIN_SUCC: -IfName=GigabitEthernet1/0/15-MACAddr=745d-229d-84b9-AccessVLANID=12-AuthorizatiOnVLANID=12-Username=term_a59f574f-931a-4f75-be5a-bde7663d9c6c; User passed 802.1X authentication and came online.