Hello there,
I am taking the liberty to writing here because I encountered a problem with my Aruba switch 6200 (ArubaOS-CX10.13). Indeed, I connect an Aastra phone to a port configured in 802.1x and MAC authentication bypass. Therefore the interface doesn't have a vlan configuration because the vlan will be assigned by the NAC . Problem: the MAC address of the phone is not present in the switching table even though it is up (POE is enabled). So the phone can't do an authentication with the NAC (by MAB). If anyone has tip or solution, I am very interested. Thanks.
Bellow, you will find my configuration:
radius dyn-authorization enable
radius-server host 10.100.95.35 key plaintext xxxxxxxxxxxxxxxxxxxxx
aaa authentication allow-fail-through
aaa group server radius nacsma01
server 10.100.95.35
aaa accounting port-access start-stop group nacsma01
aaa authentication port-access mac-auth enable
aaa authentication port-access mac-auth radius server-group nacsma01
aaa authentication port-access dot1x authenticator enable
aaa authentication port-access dot1x authenticator radius server-group nacsma01
int 1/1/10
no shut
aaa authentication port-access auth-precedence dot1x mac-auth
aaa authentication port-access auth-priority dot1x mac-auth
aaa authentication port-access dot1x authenticator enable
aaa authentication port-access mac-auth enable
aaa authentication port-access dot1x authenticator max-eapol-requests 3
aaa authentication port-access dot1x authenticator max-retries 3
aaa authentication port-access dot1x authenticator quiet-period 5
aaa authentication port-access dot1x authenticator discovery-period 5
aaa authentication port-access auth-mode multi-domain
aaa authentication port-access client-limit multi-domain 2
And here, you will find my observations:
Aruba6200# sh mac-address-table int 1/1/10
No MAC entries found.
Aruba6200# sh int br
--------------------------------------------------------------------------------------------------------
Port Native Mode Type Enabled Status Reason Speed Description
VLAN (Mb/s)
--------------------------------------------------------------------------------------------------------
1/1/10 1 access 1GbT yes up 100 --
Aruba6200# sh events
2024-05-27T14:36:45.829772+02:00 Aruba6200 intfd[756]: Event|404|LOG_INFO|UKWN|1|Link status for interface 1/1/10 is down - Administratively down
2024-05-27T14:36:45.864794+02:00 Aruba6200 port-accessd[4091]: Event|10534|LOG_INFO|CDTR|1|Interface 1/1/10 is unblocked by port-access.
2024-05-27T14:36:49.936225+02:00 Aruba6200 intfd[756]: Event|403|LOG_INFO|UKWN|1|Link status for interface 1/1/10 is up at 100 Mbps
2024-05-27T14:36:49.966981+02:00 Aruba6200 hpe-mstpd[3501]: Event|2012|LOG_INFO|CDTR|1|CIST - Topology Change generated on port 1/1/10 going in to forwarding
2024-05-27T14:36:49.969911+02:00 Aruba6200 port-accessd[4091]: Event|10533|LOG_INFO|CDTR|1|Interface 1/1/10 is blocked by port-access.
2024-05-27T14:36:50.258640+02:00 Aruba6200 hpe-mstpd[3701]: Event|2012|LOG_INFO|STBY|2|CIST - Topology Change generated on port 1/1/10 going in to forwarding
Best regards,
HB