Wired Intelligent Edge

last person joined: 6 hours ago 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

Debug Port-Access - ReqID messages constantly

This thread has been viewed 16 times
  • 1.  Debug Port-Access - ReqID messages constantly

    Posted 10 days ago
    Hello,

    I have ports configured for parallel 802.1x and mac-auth.  When a client successfully authenticates with mac-auth the switch continues to produce these messages seen in the debug log:

    0000:15:26:57.47 1X m8021xCtrl:Port 45: sent ReqId #1 to 0180c2-000003.
    0000:15:27:27.47 1X m8021xCtrl:Port 45: sent ReqId #2 to 0180c2-000003.
    0000:15:27:57.47 1X m8021xCtrl:Port 45: sent ReqId #2 to 0180c2-000003.
    0000:15:28:27.47 1X m8021xCtrl:Port 45: sent ReqId #3 to 0180c2-000003.
    0000:15:28:57.47 1X m8021xCtrl:Port 45: sent ReqId #3 to 0180c2-000003.
    0000:15:29:27.47 1X m8021xCtrl:Port 45: sent ReqId #4 to 0180c2-000003.
    0000:15:29:57.47 1X m8021xCtrl:Port 45: sent ReqId #4 to 0180c2-000003.
    0000:15:30:27.47 1X m8021xCtrl:Port 45: sent ReqId #5 to 0180c2-000003.
    0000:15:30:57.47 1X m8021xCtrl:Port 45: sent ReqId #5 to 0180c2-000003.
    0000:15:31:27.47 1X m8021xCtrl:Port 45: sent ReqId #6 to 0180c2-000003.
    0000:15:31:57.47 1X m8021xCtrl:Port 45: sent ReqId #6 to 0180c2-000003.
    0000:15:32:27.47 1X m8021xCtrl:Port 45: sent ReqId #7 to 0180c2-000003.
    0000:15:32:57.47 1X m8021xCtrl:Port 45: sent ReqId #7 to 0180c2-000003.

    These messages will generate endlessly every 30 seconds as per the default 'tx-period' value.

    Nothing appears to be sent to the actual RADIUS server.  What do these messages mean?  And is this normal?

    Thank you.


  • 2.  RE: Debug Port-Access - ReqID messages constantly

    Posted 9 days ago
    Could it be that you have a non-802.1X capable client connected with the MAC address 0180c2-000003 to port 45?

    What I read from the logs is that the switch is trying to initiate an 802.1X authentication, and as long as the client does not respond to it, it will retry every 30 seconds till the client will respond eventually.

    Looks like normal to me; but I don't think I see those messages and that may be related to log (verbosity) settings.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------