交换机是S5560,客户端是win10,配置如下:
[Core_SW]dis cur
#
dot1x
#
interface GigabitEthernet1/0/3
port access vlan 10
stp edged-port
dot1x
dot1x mandatory-domain system
#
domain system
authentication lan-access local
authorization lan-access local
#
domain default enable system
#
local-user test class network
password cipher $c$3$rPs7cArO5ZceaH2FVzU6PbNWJB+Hh3gpRls=
service-type lan-access
authorization-attribute user-role network-operator
#
=====================================================
debugging dot1x all,显示的信息如下:
*Dec 11 14:18:45:096 2019 Core_SW DOT1X/7/PACKET:
Transmitted a packet on interface GE1/0/3.
---Verbose information of the packet---
Destination Mac Address: f439-0924-0aa9
Source Mac Address: 9ce8-95d1-a74c
VLAN ID: 10
Mac Frame Type: 888e
Protocol Version ID: 1
Packet Type: 0
Packet Length: 22
-----Packet Body-----
Code: 1
Identifier: 2
Length: 5632
*Dec 11 14:18:45:097 2019 Core_SW DOT1X/7/PACKET:
Received a packet on interface GE1/0/3.
---Verbose information of the packet---
Destination Mac Address: 0180-c200-0003
Source Mac Address: f439-0924-0aa9
Mac Frame Type: 888e
Protocol Version ID: 1
Packet Type: 0
Packet Length: 6
-----Packet Body-----
Code: 2
Identifier: 2
Length: 6
*Dec 11 14:18:45:098 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] BE is in Response state.
*Dec 11 14:18:45:098 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] Created server timeout timer successfully.
*Dec 11 14:18:45:098 2019 Core_SW DOT1X/7/ERROR: PAE entering Abort for BE process failed.
*Dec 11 14:18:45:098 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] PAE is in Aborting state.
*Dec 11 14:18:45:099 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] BE is in Initialize state.
*Dec 11 14:18:45:099 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] PAE is in Disconnect state.
*Dec 11 14:18:45:099 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] BE is in Idle state.
请各位老大帮忙看看,非常感谢!
(0)
谢谢回复,后面的debug还有一行,提示port unauthorized,没有其他内容了。
Transmitted a packet on interface GE1/0/3.
---Verbose information of the packet---
Destination Mac Address: f439-0924-0aa9
Source Mac Address: 9ce8-95d1-a74c
VLAN ID: 10
Mac Frame Type: 888e
Protocol Version ID: 1
Packet Type: 0
Packet Length: 22
-----Packet Body-----
Code: 1
Identifier: 1
Length: 5632
*Dec 11 15:00:49:859 2019 Core_SW DOT1X/7/PACKET:
Received a packet on interface GE1/0/3.
---Verbose information of the packet---
Destination Mac Address: 0180-c200-0003
Source Mac Address: f439-0924-0aa9
Mac Frame Type: 888e
Protocol Version ID: 1
Packet Type: 0
Packet Length: 6
-----Packet Body-----
Code: 2
Identifier: 1
Length: 6
*Dec 11 15:00:49:860 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] BE is in Response state.
*Dec 11 15:00:49:860 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] Created server timeout timer successfully.
*Dec 11 15:00:49:861 2019 Core_SW DOT1X/7/ERROR: PAE entering Abort for BE process failed.
*Dec 11 15:00:49:874 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] PAE is in Aborting state.
*Dec 11 15:00:49:876 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] BE is in Initialize state.
*Dec 11 15:00:49:877 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] PAE is in Disconnect state.
*Dec 11 15:00:49:877 2019 Core_SW DOT1X/7/EVENT: [f439-0924-0aa9:VLAN10:GE1/0/3] BE is in Idle state.
*Dec 11 15:00:49:877 2019 Core_SW DOT1X/7/EVENT: PORT_SM[GE1/0/3] received event Set the port authorization status to unauthorized..
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论