
Attachment uploads are currently disabled. This is a temporary situation and will resume as normal in the coming days.
UNSOLVED
T
TalanWestby
1 Rookie
•
13 Posts
0
2780
December 18th, 2019 03:00
802.1x MAB and DHCP Timeout issues
We have enabled 802.1x with MAB bypass on our Dell N3048 Switches however were running into issues with our secondary authentication devices and them getting DHCP.
The port configuration we are applying is as follows:
spanning-tree portfast
switchport access vlan 43
dot1x port-control mac-based
dot1x reauthentication
dot1x timeout quiet-period 1
dot1x timeout supp-timeout 2
dot1x timeout tx-period 5
dot1x max-req 1
dot1x unauth-vlan 242
dot1x max-reauth-req 1
mab
default mab pap
authentication order dot1x mab
switchport voice vlan 44
It is my understanding in the Cisco world that timeout tx-period 5 is 5 seconds before it attempts to reauth which we have the following set: dot1x max-reauth-req 1 so based on that after 5 seconds it should try to auth with MAB after 5 seconds, however, MAB doesn't take place for around 60 seconds. Should we change the following command: authentication order dot1x mab to authentication order mab dot1x then the dot1x client doesn't get an IP Address from DHCP due to the timeout.
The version of firmware we are using is 6.5.4.10 and we were running 6.5.1.6 with the same issue.
Any help with this would be appreciated.
Responses (0)
Solutions (0)
