Check your Authentication/RADIUS servers and/or the clients for errors or more information.
What type of RADIUS server do you have (the IPs: 10.0.0.15/10.0.0.16)?
AAA does authentication of the computer and/or user account, versus MAC that only checks a mac address that can be easily changed and for most customers does not provide enough security. Without knowing what your security requirements are, it's hard to tell if you need 802.1X security.
Best to find the requirements, design for your network, and then check if that is still accurate or if you need more/less/same authentication to prevent the threats you have identified. It may make sense to do such a thing together with your Aruba partner and/or other network/security consultant.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Feb 01, 2023 10:16 AM
From: t.antony
Subject: Aruba 2930F AAA port-access denying clients access to network
I had AAA port-access authenticator turned on the switch ports, but lately the client computers not get any connection, so if I disable the AAA they get connection. How can I figure out what's causing this? Is there any command on the CLI I can run on the switch port with AAA?
I don't have AAA on uplink switch ports, just on computers.
I will have port-security turned on for MAC, so is AAA even necessary?