Unsolved
32 Posts
0
892
November 4th, 2021 01:00
MAB authentication with MAC-Address 00:00:00:00:00:00
Hi all,
I've setup my switch / interfaces to do Dot1x with MAB failover in monitoring mode using ClearPass as RADIUS server. However, one client is having issues failing over to MAB. If I check the authentication history logs, I see that this client is not using it's MAC-address to authenticate but instead is reporting 00:00:00:00:00:00:
My interface is configured as follows:
SWITCHNAME(config)#show running-config interface gigabitethernet 1/0/38
no green-mode eee
speed 100
description "NAC Monitoring"
switchport access vlan X
authentication event fail action authorize vlan X
authentication event no-response action authorize vlan X
authentication event server dead action authorize vlan X
dot1x timeout tx-period 5
dot1x max-reauth-req 3
mab
authentication order dot1x mab
SWITCHNAME(config)#show authentication clients all
Interface MAC-Address Method Host Mode Control Mode VLAN Assigned Reason
--------- ----------------- ------- ------------------------ ------------ --------------------------
Gi1/0/38 00:00:00:00:00:00 none multi-domain-multi-host auto Guest VLAN (X)
Remarkable is; the method is set to none?
Why is the client not reporting with it's MAC-address? What does the 00:00:00:00:00:00 MAC-Address mean?


DELL-Marco B
Moderator
•
4K Posts
0
November 4th, 2021 11:00
Hello,
which switch model are you configured?
Can you verify at the client side which is the real MAC address of the NIC, in order to exclude an issue with the network card?
Thanks
Marco
lk2819
32 Posts
0
November 8th, 2021 01:00
Hi Marco,
Sorry for my late reply. The switch i'm using is a N2048P switch. I'm having the same issue on two different switches (both on a N2048P model), with two different endpoints (both the same type of device: clock-terminal).
The strange thing is; the MAC-adres is known in the mac-address-table, but is not used (?) in the authentication request?:
DELL-Marco B
Moderator
•
4K Posts
0
November 8th, 2021 09:00
Hello,
which firmware version are you using on the switches? And on the client side, can you give me more information on the model? Maybe the issue is with the client rather than the switch. Maybe a compatibility issue.
Thanks
Marco