Hp(comware 5) dot1x and Cisco ACS 5.8

[shingetter]

I was wondering if any had any issues with getting an HP switch to work with Cisco ACS 5.8...My issue is when the reauth-period is hit the computer disconnects and never re-authentication with the ACS server. Here are my current configs.

Hp switch

dot1x

dot1x retry 3

dot1x timer reauth-period 60(This is actually setup for 3600 seconds I set it this low for testing)

dot1x authentication-method eap

domain tacacs

authentication default hwtacacs-scheme tacacs_auth local

authorization default hwtacacs-scheme tacacs_auth local

accounting default hwtacacs-scheme tacacs_auth local

authentication lan-access radius-scheme 8021x

authorization lan-access radius-scheme 8021x

accounting lan-access radius-scheme 8021x

access-limit disable

state active

idle-cut disable

self-service-url disable

interface GigabitEthernet1/0/25

port link-type hybrid

undo port hybrid vlan 1

port hybrid vlan 910 tagged

port hybrid vlan 20 untagged

port hybrid pvid vlan 20

undo voice vlan mode auto

voice vlan 910 enable

loopback-detection enable

loopback-detection action shutdown

bpdu-drop any

poe enable

stp edged-port enable

lldp compliance admin-status cdp txrx

dot1x re-authenticate

dot1x port-method portbased

dot1x

[kthiruve]

Hi Ken,

Please turn the Radius debugs on the switch to see how it interprets the Termination action sent from ACS.

I hate to point fingers, but in this case you might have to talk to HP based on what your debugs tell you. Termination action has disconnect and request option and this has to be sent and interpreted correctly.

Thanks

Krishnan

[shingetter]

I was thinking that also...I just can't pinpoint the issue.  Here is the debugging I capture yesterday evening.:

Thank you for your help also!!!!!!!!!!!!!

-----Packet Body-----

Code: 2.

Identifier: 97.

Length: 740.

*Jul  4 05:33:17:596 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: Continue.

*Jul  4 05:33:17:599 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:265, Current state:14

*Jul  4 05:33:17:601 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node EAP relay...

*Jul  4 05:33:17:622 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: ACM authentication continue.

*Jul  4 05:33:17:625 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:20482, Current state:14

*Jul  4 05:33:17:628 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 151.

-----Packet Body-----

Code: 1.

Identifier: 98.

Length: 151.

*Jul  4 05:33:17:633 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received an EAPOL packet.

*Jul  4 05:33:17:636 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received Packet Type: EAPOL-PACKET.

*Jul  4 05:33:17:640 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,EAP Type: Response.

*Jul  4 05:33:17:642 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Resource exists.

*Jul  4 05:33:17:645 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Auth:210, Code Type: EAP-TLS.

*Jul  4 05:33:17:647 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Sent EAP Msg to 802.1X-Msg-Queue successfully.

*Jul  4 05:33:17:650 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,End processing the packet received.

---Verbose information of the packet---

Destination Mac Address: 0180-c200-0003

Source Mac Address: c8d3-ff77-e114

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 69.

-----Packet Body-----

Code: 2.

Identifier: 98.

Length: 69.

*Jul  4 05:33:17:656 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: Continue.

*Jul  4 05:33:17:660 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:265, Current state:14

*Jul  4 05:33:17:663 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node EAP relay...

%Jul  4 05:33:17:695 2000 802.1x Test Switch RDS/6/RDS_SUCC: -IfName=GigabitEthernet1/0/25-VlanId=20-MACAddr=C8:D3:FF:77:E1:14-IPAddr=N/A-IPv6Addr=N/A-UserName=host/MUHJL-CS2PP3.AREA52.AFNOAPPS.USAF.MIL@tacacs; User got online successfully.

*Jul  4 05:33:17:705 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: Auth request ack for succeed, ACM->1X.

*Jul  4 05:33:17:708 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:260, Current state:14

*Jul  4 05:33:17:710 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node SUCCESS...

*Jul  4 05:33:17:713 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,DOT1x received receive radius key from ACM

*Jul  4 05:33:17:716 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,DOT1x received send key from ACM

*Jul  4 05:33:17:718 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Accept new authorization information.

*Jul  4 05:33:17:722 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,

Received a Vlan authorizaion notification:MAC=c8d3-ff77-e114, CMD=1, ResultCode=0

*Jul  4 05:33:17:725 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:22, Current state:7

*Jul  4 05:33:17:728 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Processing node success trans...

*Jul  4 05:33:17:730 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node SUCCESS...

*Jul  4 05:33:17:733 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Author operation finished!

*Jul  4 05:33:17:735 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:29, Current state:7

*Jul  4 05:33:17:738 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Processing node success trans...

*Jul  4 05:33:17:740 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,DOT1X_Auth_SuccessTrans Received MSG:SC_MSG_AUTHOR_FINISH

*Jul  4 05:33:17:743 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node WORKING...

*Jul  4 05:33:18:254 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,

The user ip address:0.0.0.0

*Jul  4 05:33:18:257 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Sending EAPoL-Success...

*Jul  4 05:33:18:260 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 4.

-----Packet Body-----

Code: 3.

Identifier: 98.

Length: 4.

*Jul  4 05:34:16:959 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:520, Current state:9

*Jul  4 05:34:16:962 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,DOT1X Auth WorkTrans state: Reauthentication times out

*Jul  4 05:34:16:964 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,

The domain is tacacs.

*Jul  4 05:34:16:967 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node CONNECTING...

*Jul  4 05:34:16:970 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,

Send shakehanding-pkt without proxy-chk tag

*Jul  4 05:34:16:972 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 5.

-----Packet Body-----

Code: 1.

Identifier: 99.

Length: 5.

*Jul  4 05:34:46:969 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: timeout

*Jul  4 05:34:46:972 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:519, Current state:3

*Jul  4 05:34:46:975 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node CONNECTING...

*Jul  4 05:34:46:977 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,

Send shakehanding-pkt without proxy-chk tag

*Jul  4 05:34:46:980 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 5.

-----Packet Body-----

Code: 1.

Identifier: 99.

Length: 5.

*Jul  4 05:35:16:959 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: timeout

*Jul  4 05:35:16:962 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:519, Current state:3

*Jul  4 05:35:16:964 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node CONNECTING...

*Jul  4 05:35:16:967 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,

Send shakehanding-pkt without proxy-chk tag

*Jul  4 05:35:16:969 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 5.

-----Packet Body-----

Code: 1.

Identifier: 99.

Length: 5.

[802.1x Test Switch]

*Jul  4 05:35:46:962 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: timeout

*Jul  4 05:35:46:965 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:519, Current state:3

*Jul  4 05:35:46:967 2000 802.1x Test Switch 8021X/7/ERROR: Auth:210,Supplicant have no reponse  request-id packet

*Jul  4 05:35:46:970 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node FAILURE...

*Jul  4 05:35:46:972 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Processing node Unauthor action...

*Jul  4 05:35:47:482 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Sending EAPoL-Failure...

*Jul  4 05:35:47:485 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 4.

-----Packet Body-----

Code: 4.

Identifier: 9a.

Length: 4.

*Jul  4 05:35:47:488 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,

Received a Vlan authorizaion notification:MAC=c8d3-ff77-e114, CMD=2, ResultCode=0

*Jul  4 05:35:47:490 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:23, Current state:11

*Jul  4 05:35:47:493 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210, Processing node unauthor trans, the Msgtype is 23.

*Jul  4 05:35:47:495 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,DOT1X Auth UnauthorTrans recv SC_MSG_AUTHOR_UNASGNVLANFROMPORT_RESP: ulParam2=0

*Jul  4 05:35:47:498 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Processing node Unauthor action...

*Jul  4 05:35:47:501 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Unauthor operation finished!

*Jul  4 05:35:47:505 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node LOGOFF...

*Jul  4 05:35:47:525 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Msg: Release request ack, ACM->1X.

*Jul  4 05:35:47:528 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:210,Received Msg:263, Current state:12

*Jul  4 05:35:47:530 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Processing node RELEASE...

*Jul  4 05:35:47:536 2000 802.1x Test Switch 8021X/7/EVENT: Auth:210,Authenticatior resource is released.

#Jul  4 05:35:54:502 2000 802.1x Test Switch SHELL/4/LOGOUT:

Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.2:kenneth.padgett logout from VTY

%Jul  4 05:35:54:507 2000 802.1x Test Switch SHELL/5/SHELL_LOGOUT: kenneth.padgett logged out from XXX.XXX.20.141.

#Jul  4 05:35:55:509 2000 802.1x Test Switch SSH/4/TrapLogoff:

1.3.6.1.4.1.25506.2.22.1.3.0.4 SSH user logoff trap information

#Jul  4 05:36:04:214 2000 802.1x Test Switch SHELL/4/LOGIN:

Trap 1.3.6.1.4.1.25506.2.2.1.1.3.0.1:kenneth.padgett login from VTY

%Jul  4 05:36:04:217 2000 802.1x Test Switch SHELL/5/SHELL_LOGIN: kenneth.padgett logged in from XXX.XXX.20.141.

#Jul  4 05:36:05:099 2000 802.1x Test Switch SSH/4/TrapLogin:

1.3.6.1.4.1.25506.2.22.1.3.0.3 SSH user login trap information

%Jul  4 05:40:55:672 2000 802.1x Test Switch IC/5/IC_SECLOG_USAGEHIGH: The usage of security log file flash:/seclog/seclog.log reaches 100%.

[shingetter]

Here's another debugged I pulled just now.

*Jul  4 09:35:09:729 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received an EAPOL packet.

*Jul  4 09:35:09:731 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Auth:0,Received Packet Type: EAPOL-LOGOFF.

*Jul  4 09:35:09:732 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,No resource exists.

*Jul  4 09:35:18:003 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received an EAPOL packet.

*Jul  4 09:35:18:005 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,No resource exists.

*Jul  4 09:35:18:007 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Alloc or search resource successfully.

*Jul  4 09:35:18:008 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Band the resource to port successfully.

*Jul  4 09:35:18:011 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received Packet Type: EAPOL-START.

*Jul  4 09:35:18:012 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Send Msg EAPOL-START to 802.1X-Msg-Queue successfully.

*Jul  4 09:35:18:016 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg:EAP-START, Supplicant->Authenticator.

*Jul  4 09:35:18:017 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:1, Current state:1

*Jul  4 09:35:18:019 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node CONNECTING...

*Jul  4 09:35:18:020 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,

Send shakehanding-pkt without proxy-chk tag

*Jul  4 09:35:18:022 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 5.

-----Packet Body-----

Code: 1.

Identifier: 1.

Length: 5.

*Jul  4 09:35:18:031 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received an EAPOL packet.

*Jul  4 09:35:18:032 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received Packet Type: EAPOL-PACKET.

*Jul  4 09:35:18:034 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,EAP Type: Response.

*Jul  4 09:35:18:035 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Resource exists.

*Jul  4 09:35:18:037 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Auth:228,Code Type: Identity.

*Jul  4 09:35:18:038 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,  lookup user ip from arp snooping .

*Jul  4 09:35:18:040 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Sent EAP Msg to 802.1X-Msg-Queue successfully.

*Jul  4 09:35:18:041 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,End processing the packet received.

---Verbose information of the packet---

Destination Mac Address: 0180-c200-0003

Source Mac Address: c8d3-ff77-e114

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 47.

-----Packet Body-----

Code: 2.

Identifier: 1.

Length: 47.

*Jul  4 09:35:18:044 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg: Continue.

*Jul  4 09:35:18:046 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:265, Current state:3

*Jul  4 09:35:18:047 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node EAP relay...

*Jul  4 09:35:18:065 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg: ACM authentication continue.

*Jul  4 09:35:18:067 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:20482, Current state:14

*Jul  4 09:35:18:069 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 6.

-----Packet Body-----

Code: 1.

Identifier: f3.

Length: 6.

*Jul  4 09:35:18:093 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received an EAPOL packet.

*Jul  4 09:35:18:095 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received Packet Type: EAPOL-PACKET.

*Jul  4 09:35:18:096 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,EAP Type: Response.

*Jul  4 09:35:18:098 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Resource exists.

*Jul  4 09:35:18:099 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Auth:228, Code Type: EAP-TLS.

*Jul  4 09:35:18:102 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Sent EAP Msg to 802.1X-Msg-Queue successfully.

*Jul  4 09:35:18:103 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,End processing the packet received.

---Verbose information of the packet---

Destination Mac Address: 0180-c200-0003

Source Mac Address: c8d3-ff77-e114

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 740.

-----Packet Body-----

Code: 2.

Identifier: f3.

Length: 740.

*Jul  4 09:35:18:110 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg: Continue.

*Jul  4 09:35:18:111 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:265, Current state:14

*Jul  4 09:35:18:113 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node EAP relay...

*Jul  4 09:35:18:125 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg: ACM authentication continue.

*Jul  4 09:35:18:126 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:20482, Current state:14

*Jul  4 09:35:18:128 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 151.

-----Packet Body-----

Code: 1.

Identifier: f4.

Length: 151.

*Jul  4 09:35:18:135 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received an EAPOL packet.

*Jul  4 09:35:18:136 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Received Packet Type: EAPOL-PACKET.

*Jul  4 09:35:18:139 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,EAP Type: Response.

*Jul  4 09:35:18:140 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Resource exists.

*Jul  4 09:35:18:142 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Auth:228, Code Type: EAP-TLS.

*Jul  4 09:35:18:143 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Sent EAP Msg to 802.1X-Msg-Queue successfully.

*Jul  4 09:35:18:145 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,End processing the packet received.

---Verbose information of the packet---

Destination Mac Address: 0180-c200-0003

Source Mac Address: c8d3-ff77-e114

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 69.

-----Packet Body-----

Code: 2.

Identifier: f4.

Length: 69.

*Jul  4 09:35:18:153 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg: Continue.

*Jul  4 09:35:18:155 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:265, Current state:14

*Jul  4 09:35:18:156 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node EAP relay...

%Jul  4 09:35:18:187 2000 802.1x Test Switch RDS/6/RDS_SUCC: -IfName=GigabitEthernet1/0/25-VlanId=20-MACAddr=C8:D3:FF:77:E1:14-IPAddr=N/A-IPv6Addr=N/A-UserName=host/MUHJL-CS2PP3.AREA52.AFNOAPPS.USAF.MIL@tacacs; User got online successfully.

*Jul  4 09:35:18:196 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Msg: Auth request ack for succeed, ACM->1X.

*Jul  4 09:35:18:197 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:260, Current state:14

*Jul  4 09:35:18:199 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node SUCCESS...

*Jul  4 09:35:18:200 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,DOT1x received receive radius key from ACM

*Jul  4 09:35:18:203 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,DOT1x received send key from ACM

*Jul  4 09:35:18:204 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Accept new authorization information.

*Jul  4 09:35:18:205 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,

Received a Vlan authorizaion notification:MAC=c8d3-ff77-e114, CMD=1, ResultCode=0

*Jul  4 09:35:18:207 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:22, Current state:7

*Jul  4 09:35:18:209 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Processing node success trans...

*Jul  4 09:35:18:210 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node SUCCESS...

*Jul  4 09:35:18:211 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Author operation finished!

*Jul  4 09:35:18:213 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Received Msg:29, Current state:7

*Jul  4 09:35:18:214 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,Processing node success trans...

*Jul  4 09:35:18:217 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,DOT1X_Auth_SuccessTrans Received MSG:SC_MSG_AUTHOR_FINISH

*Jul  4 09:35:18:218 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Processing node WORKING...

*Jul  4 09:35:18:702 2000 802.1x Test Switch 8021X/7/EVENT: Port:GigabitEthernet1/0/25,Auth:228,

The user ip address:0.0.0.0

*Jul  4 09:35:18:704 2000 802.1x Test Switch 8021X/7/EVENT: Auth:228,Sending EAPoL-Success...

*Jul  4 09:35:18:706 2000 802.1x Test Switch 8021X/7/PACKET: Port:GigabitEthernet1/0/25,Transmitted a packet.

---Verbose information of the packet---

Destination Mac Address: c8d3-ff77-e114

Source Mac Address: 4431-92fc-23a0

Mac Frame Type: 888e.

Protocol Version ID: 1.

Packet Type: 0.

Packet Length: 4.

-----Packet Body-----

Code: 3.

Identifier: f4.

Length: 4.

[mbm270887]

Hello

i m trying to configure the wire dot1.x on HP comware to get the dynamics vlans assignment  but it doesnt seem to be working ... have you done this one ?

tks

matheus