Unsolved

32 Posts

892

November 4th, 2021 01:00

MAB authentication with MAC-Address 00:00:00:00:00:00

Hi all,

 

I've setup my switch / interfaces to do Dot1x with MAB failover in monitoring mode using ClearPass as RADIUS server. However, one client is having issues failing over to MAB. If I check the authentication history logs, I see that this client is not using it's MAC-address to authenticate but instead is reporting 00:00:00:00:00:00:

lk2819_1-1636013873618.png

 

My interface is configured as follows: 

SWITCHNAME(config)#show running-config interface gigabitethernet 1/0/38

no green-mode eee
speed 100
description "NAC Monitoring"
switchport access vlan X
authentication event fail action authorize vlan X
authentication event no-response action authorize vlan X
authentication event server dead action authorize vlan X
dot1x timeout tx-period 5
dot1x max-reauth-req 3
mab
authentication order dot1x mab









 

SWITCHNAME(config)#show authentication clients all

Interface MAC-Address Method Host Mode Control Mode VLAN Assigned Reason
--------- ----------------- ------- ------------------------ ------------ --------------------------
Gi1/0/38 00:00:00:00:00:00 none multi-domain-multi-host auto Guest VLAN (X)

 

Remarkable is; the method is set to none?

Why is the client not reporting with it's MAC-address? What does the 00:00:00:00:00:00 MAC-Address mean?

Moderator

 • 

4K Posts

November 4th, 2021 11:00

Hello,

which switch model are you configured?

Can you verify at the client side which is the real MAC address of the NIC, in order to exclude an issue with the network card?
Thanks

Marco

32 Posts

November 8th, 2021 01:00

Hi Marco,

Sorry for my late reply. The switch i'm using is a N2048P switch. I'm having the same issue on two different switches (both on a N2048P model), with two different endpoints (both the same type of device: clock-terminal).

 

The strange thing is; the MAC-adres is known in the mac-address-table, but is not used (?) in the authentication request?:

lk2819_0-1636365024008.png

 

Moderator

 • 

4K Posts

November 8th, 2021 09:00

Hello,

which firmware version are you using on the switches? And on the client side, can you give me more information on the model? Maybe the issue is with the client rather than the switch. Maybe a compatibility issue.

Thanks

Marco

No Events found!

Top