dot1x auth-fail 和 critical vlan 下发失败

测试以下auth fail vlan critical vlan但不成功, 是配置问题吗?

vlan 和DHCP等配置已测过没问题, 测正常用户登录也成功, 但特测登录失败操作和断开iMC(测逃生critical vlan)不成功....用户拿不到IP

 dot1x

 dot1x authentication-method eap

 dot1x retry 10

 dot1x timer handshake-period 20

 dot1x timer reauth-period 7200

 dot1x timer tx-period 10

interface GigabitEthernet1/0/5

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 5 to 8 untagged

 port hybrid pvid vlan 7

 stp edged-port

 dot1x

 undo dot1x handshake

 dot1x mandatory-domain radius_domain

 undo dot1x multicast-trigger

 dot1x re-authenticate

 dot1x unicast-trigger

 dot1x auth-fail vlan 7

 dot1x critical vlan 8

 dot1x critical eapol

[sw2]*Jan  7 22:08:46:359 2013 sw2 DOT1X/7/EVENT: BE is in Idle state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:359 2013 sw2 DOT1X/7/EVENT: PAE is in Aborting state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:359 2013 sw2 DOT1X/7/EVENT: BE is in Initialize state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:360 2013 sw2 DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:360 2013 sw2 DOT1X/7/EVENT: BE is in Idle state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:360 2013 sw2 DOT1X/7/EVENT: Interface GigabitEthernet1/0/5 received Set the port authorization status to unauthorized event.

*Jan  7 22:08:46:679 2013 sw2 DOT1X/7/EVENT: Processing new mac event: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:684 2013 sw2 DOT1X/7/EVENT: PAE is in Disconnect state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:684 2013 sw2 DOT1X/7/EVENT: BE is in Initialize state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:684 2013 sw2 DOT1X/7/EVENT: PAE is in Restart state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:685 2013 sw2 DOT1X/7/EVENT: BE is in Idle state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:685 2013 sw2 DOT1X/7/EVENT: PAE is in Connecting state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:685 2013 sw2 DOT1X/7/EVENT: PAE is in Authenticating state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:685 2013 sw2 DOT1X/7/EVENT: BE is in Request state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:46:686 2013 sw2 DOT1X/7/EVENT: Sending EAP packet: Identifier=1, type=1.

*Jan  7 22:08:46:686 2013 sw2 DOT1X/7/PACKET: 

Transmitted a packet on interface GigabitEthernet1/0/5.

Destination Mac Address=c85b-76f6-fa72

Source Mac Address=9ce8-953c-d194

VLAN ID=7

[sw2]d*Jan  7 22:08:57:359 2013 sw2 DOT1X/7/EVENT: BE is in Request state: UserMAC=c85b-76f6-fa72, VLANID=7, Interface=GigabitEthernet1/0/5.

*Jan  7 22:08:57:359 2013 sw2 DOT1X/7/EVENT: Sending EAP packet: Identifier=1, type=1.

*Jan  7 22:08:57:360 2013 sw2 DOT1X/7/PACKET: 

Transmitted a packet on interface GigabitEthernet1/0/5.

Destination Mac Address=c85b-76f6-fa72

Source Mac Address=9ce8-953c-d194

VLAN ID=7

Mac Frame Type=888e

Protocol Version ID=1

Packet Type=0

Packet Length=5

-----Packet Body-----

Code=1

Identifier=1

Length=1280