[PacketFence-devel] Problem with mab unregister vlan Cisco 2960.

[ROMEN Q. M. <cc-...@ca...>]

Hi,


I´m trying to configure dot1x/mab witch Packetfence and Cisco 2960.  I 
can configurate an auto-register node with dot1x but the mab fail at the 
authorization, the switch drop the cisco port.

I would like to assign the vlan register and launch the packetfence 
portal with mab authentication.


Any idea?


#show authentication sessions int fastEthernet 0/1
             Interface:  FastEthernet0/1
           MAC Address:  3c97.0e97.d496
            IP Address:  Unknown
             User-Name:  3c970e97d496
                Status:  Authz Failed
                Domain:  DATA
        Oper host mode:  multi-domain
      Oper control dir:  both
         Authorized By:  Authentication Server
           Vlan Policy:  N/A
       Session timeout:  10800s (local), Remaining: 10659s
        Timeout action:  Reauthenticate
          Idle timeout:  N/A
     Common Session ID:  0A91AF85000000190093EAF6
       Acct Session ID:  0x00000021
                Handle:  0x1D00001A

Runnable methods list:
        Method   State
        mab      Authc Success
        dot1x    Not run
-------------

Jan  2 11:38:25: %AUTHMGR-7-RESULT: Authentication result 'success' from 
'mab' for client (3c97.0e97.d496) on Interface Fa0/1 AuditSessionID 
0A91AF85000000190093EAF6
Jan  2 11:38:25: %AUTHMGR-5-VLANASSIGN: VLAN 997 assigned to Interface 
Fa0/1 AuditSessionID 0A91AF85000000190093EAF6
Jan  2 11:38:25: %AUTHMGR-5-FAIL: Authorization failed or unapplied for 
client (3c97.0e97.d496) on Interface Fa0/1 AuditSessionID 
0A91AF85000000190093EAF6
Jan  2 11:38:25: %AUTHMGR-5-SUCCESS: Authorization succeeded for client 
(3c97.0e97.d496) on Interface Fa0/1 AuditSessionID 0A91AF85000000190093EAF6