Helllo everyone, firs time posting. I searched the archives for a similar thread before posting this. I have a cusomter with Aruba 6300M switches that is authenticating at the wired edge using both dot1x and mac-auth. We are using Clearpass (6.12.x) for RADIUS. Since we are still in the early phases of this transition, we transition the edge device in to the generic "data" vlan provided the supplicant provides a MAC-Address if they do not meet a more specific criteria, such as being a camera, phone, or access point. This was worked really well until last week. The change is that the customer is having Xerox printers installed throughout their site. Immediately I received complaints that the copiers were randomly going offline (not reachable over the network). The workaround to the issue has been to either wait until the copier comes back online, or re-seat the network connection.
I initially confirmed the issue was dot1x/mac-auth related by taking a "control group" of printers and configuring their ports to statically assign the data vlan (so just basic vlan access 10, or whatever the VLAN is at that campus).
Here is a sample of what I am seeing in the switch logs. Thank you in advance for any help that can be provided.
Clearpass shows the re-auth each time the client drops, but nothing about why the client is dropping.
This is what I think is the most significant detail. The interface indicates the failure took place because the supplicant timed out. Is there a setting or a parameter that I can tweak to keep this from happening?
Here is the interface-configuration.
