Port-Based Access Control (802.1X)-Related Problems - HP ProCurve 6400cl Series Management And Configuration Manual

Note
Changing the topology can solve this problem. Also, the duplicate MAC
address must age out before the Switch 1600M/2400M/2424M/4000M/8000M
port can join the mesh. Refer to the following two topics in the "Switch
Meshing" chapter of the Advanced Traffic Management Guide for your
switch:
■ The section titled "Using a Heterogeneous Switch Mesh"
The bulleted item titled "Compatibility with Older Switches" in the section
■
titled "Requirements and Restrictions".
Duplicate MAC Addresses on Different Switches. In a switch mesh that
includes any 1600M/2400M/2424M/4000M/8000M switches, duplicate MAC
addresses on different switches are not allowed. (The 1600M/2400M/2424M/
4000M/8000M switches do not recognize multiple instances of a particular
MAC address on different VLANs.) Refer to "The Switch Mesh Does Not Allow
An HP ProCurve Switch 1600M/2400M/2424M/4000M/8000M Port To Join the
Mesh" on page C-14.

Port-Based Access Control (802.1x)-Related Problems

To list the 802.1x port-access Event Log messages stored on the switch, use
show log 802.
See also "Radius-Related Problems" on page C-18.
The switch does not receive a response to RADIUS authentication
requests. In this case, the switch will attempt authentication using the
secondary method configured for the type of access you are using (console,
Telnet, or SSH).
There can be several reasons for not receiving a response to an authentication
request. Do the following:
Use ping to ensure that the switch has access to the configured RADIUS
■
servers.
Verify that the switch is using the correct encryption key (RADIUS secret
■
key) for each server.
Verify that the switch has the correct IP address for each RADIUS server.
■
Ensure that the radius-server timeout period is long enough for network
■
conditions.
The switch does not authenticate a client even though the RADIUS
server is properly configured and providing a response to the
Troubleshooting
Unusual Network Activity
C-15