802.1X Authentication issues when moving between switch ports

Question

Hi Guys,
We are having some issues at our office where when users move from one switch to another, the 802.1X authentication does not want to take place. The PC just gets an APIPA address. Now I have read about features that MAC Move and MAC replace but they seem to be used when moving from one port a switch to another port on that same switch. Will MAC move help for issues between switches? And should I focus my attention on the switch's configuration or have a look at the NPS server that might be blocking that authentication as the user is already authenticated?
My configuration we have on the switch ports look as follows:
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
dot1x pae authenticator
Your help is greatly appreciated.
Grant

Answer 1

Hi Neno,
Thanks for the reply. We are using NPS on a Server 2008 R2 virtual machine. The switches are stacked 2960S-48FPS-L running 15.0(2)SE. I will quickly do the debugs and get back to you.
Here is the config:
aaa group server radius customer-nps
 server name radius1
 server name radius2
aaa authentication dot1x default group radius
dot1x system-auth-control
radius server radius1
 address ipv4 172.28.130.52 auth-port 1645 acct-port 1646
 key 7 05392415365959251C283630083D2F0B3B2E22253A
radius server radius2
 address ipv4 172.28.131.52 auth-port 1645 acct-port 1646
 key 7 107C2B031202052709290B092719181432190D000C
interface GigabitEthernet1/0/1
 switchport access vlan 300
 switchport mode access
 switchport voice vlan 2
 srr-queue bandwidth share 1 30 35 5
 queue-set 2
 priority-queue out
 authentication host-mode multi-domain
 authentication order dot1x mab
 authentication priority dot1x mab
 authentication periodic
 authentication timer reauthenticate 28800
 authentication timer inactivity 1800
 mab
 no snmp trap link-status
 mls qos trust cos
 dot1x pae authenticator
 auto qos trust cos
 storm-control broadcast level 1.00
 storm-control multicast level 1.00
 spanning-tree portfast
 spanning-tree bpdufilter enable