Cisco Switch 2690 Si PoE-48

Good Day guys
I am given this assignment to complete the switch setup for 2960
To tell the truth, I am lost between lines of command and I cant seem to make them up and complete my assignment.
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
hostname Campus-Core-SW01
boot-start-marker
boot-end-marker
enable secret Kuboma82
enable password P@ssw0rd
ip name-server 172.16.254.2
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
interface FastEthernet0
no ip address
shutdown
interface GigabitEthernet1/0/2
description Cyberoam_LAN
switchport mode trunk
spanning-tree portfast
interface GigabitEthernet1/0/6
description Connected to Ruckus Wireless Director
switchport mode trunk
spanning-tree portfast
interface Vlan1
ip address 172.16.254.8 255.255.255.0
no ip redirects
ip default-gateway 172.16.254.1
ip http server
ip http secure-server
line con 0
password P@ssw0rd
login
line vty 0 4
password P@ssw0rd
login
line vty 5 15
password P@ssw0rd
login
end
Can someone please make up the commands for this? I am getting a lot of errors on my packet tracer.
Thank you

I'm taking a guess, (I'd voice the same concern as luckymike33)
You have your interfaces set a trunks. Did you mean that?
interface GigabitEthernet1/0/2
description Cyberoam_LAN
switchport mode trunk
spanning-tree portfast
Or did mean to set them as access ports?
switchport mode access

Similar Messages

Cisco catalyst 2690 switch vlanTable

Hi,
I have a cisco catalyst 2690 switch.
I want monitoring IP, MAC, and Port Address.
I use this docu: http://docstore.mik.ua/orelly/perl/sysadmin/ch10_03.htm
This works great:
htvtef7-nagios:/ # snmptranslate -On BRIDGE-MIB:dot1dTpFdbTable
.1.3.6.1.2.1.17.4.3
snmpwalk -c tef7snmp@761 -v 2c 10.76.1.7 .1.3.6.1.2.1.17.4.3
htvtef7-nagios:/ # snmptranslate -On BRIDGE-MIB:dot1dBasePortTable
.1.3.6.1.2.1.17.1.4
snmpwalk -c tef7snmp@761 -v 2c 10.76.1.7 .1.3.6.1.2.1.17.1.4
htvtef7-nagios:/ # snmptranslate -On CISCO-STACK-MIB:vlanTable
.1.3.6.1.4.1.9.5.1.9.2
But I get a error:
htvtef7-nagios:/ # snmpwalk -c tef7snmp -v 2c 10.76.1.7 .1.3.6.1.4.1.9.5.1.9.2
SNMPv2-SMI::enterprises.9.5.1.9.2 = No Such Object available on this agent at this OID
Switch config:
snmp-server community testament RO
snmp-server community tef7snmp RO
snmp-server location XYZ
snmp-server contact MR.XYZ
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps cluster
snmp-server enable traps entity
snmp-server enable traps cpu threshold
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps envmon
snmp-server enable traps mac-notification
snmp-server enable traps copy-config
snmp-server enable traps config
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps vlan-membership
snmp-server host XXX.XXX.XXX.XXX public
snmp-server host YYY.YYY.YYY.YYY tef7snmp
What did I do wrong?
THX!

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Normál táblázat";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
Thx for the replay!
I use on the switch c2960-lanbasek9-mz.122-25.SEE3.bin (IOS),
the Cisco Feature Navigator say, this IOS support the CISCO-STACK-MIB:
http://tools.cisco.com/ITDIT/MIBS/MainServlet?ReleaseSel=0&PlatformSel=0&fsSel=0&IMAGE_NAME=c2960-lanbasek9-mz.122-25.SEE3.bin&SUBMIT2=Submit&IMAGE_ID=816103
In show snmp mib I could not find the vlanTable. See the attachment.
I du not understand!

Cisco 2960S FPS-L PoE switch with Avaya 9811g VOIP setup

Hello,
I am connecting a setup for data/voice connecting Catalyst 2960S-FPS-L PoE switch with Avaya 9811g series VOIP phone. As per my knowledge cisco switch works well with Cisco phone as it has got some builtin "Macros" and Intelligent PoE recognition when we connect device getting the details of another device through CDP. I understand I have to create data and voice vlan with QOS then enable trunking on the interface to other switch that is also 2960. Little confuse if is there any compatibility issues with Switch and Avaya phone regarding protocol/data/voice...?
Do I have to do PoE config for each port on the each interface?
any help or detail config will help.
Thanks in advance.

Hi I am back after good research. created two vlan data and voice with trunk on interface1/0/48 given below config..
connection b/w 2960s FPS Switch and Avaya 9611g IP Phone.
lldp/cdp is enable on switch
So I created this config if some one can take a look .
expert advise if something wrong?..
I am only concern with Voice and PoE as voice is my priority. do i have to map something for voice quality?
also if i create another Trunk port one allow voice other allow data both cable will go to switch will that be issue?
interface....
switchport access vlan x
switchport mode access
switchport nonegotiate
switchport voice vlan xx
srr-queue bandwidth share 10 10 60 20
queue-set 2
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
interface ........
switchport trunk allowed vlan x,x
switchport mode trunk
switchport nonegotiate
srr-queue bandwidth share 10 10 60 20
queue-set 2
priority-queue out
mls qos trust cos
auto qos voip trust

Cisco 3750x 24 port poe switch single port is faulty.

what i can do if my cisco 3750x 24 port poe switch single port is faulty ????

Duplicate posts.
Go here: http://supportforums.cisco.com/discussion/12187366/cisco-3750x-24-port-poe-switch-failure

Cisco 3750x 24 port poe switch failure

what is the chance of cisco 3750x 24 port poe switch failure? is backup necessary for this ? please answer me in details.

If you have a Cisco switch with, at least, one faulty port you RMA the appliance.
There is nothing more detailed than that.

UPDATE: Deal of the Week - Cisco 3550 24 port PoE Switch

Well that didn't last long...our "Deal of the Week" this week sold out in 1 day, so we figured we better do another deal for everyone. - - - Cisco 3550 24 Port PoE Switch - $65.00 --- www.cablesandkits.com/DOW

How might you use PowerShell Direct, the latest addition to the PowerShell family that's coming with Windows 10 and Windows Server 2016? Consider this:Have you ever tried to make a configuration changeon a Friday afternoon, right before beer o’clock, and you couldn’t get access to the machine you needed to change? This problem might be caused by out-of-datesecurity settings, a network change, or something else.PowerShell Direct will work, even when otherwise things would stand in your way.According to Petri, the new software will change the way you operate "between hypervisorhost and guest virtual machine in a secure way." No more "faffing about to get security settings configured, holes poked in firewalls," or remoting in – PowerShell Direct gives you a direct way to open a session on any guest computer in seconds.
If you have Windows...

Voltage In Cisco Switch (PoE)

I want to learn how a Cisco PoE switch sends the voltage on its ports ...
I plug in two IP cameras. One camera runs, if you power it from a transformer, 5VDC at 800mA. The other, if you power it from a transformer, runs 9VDC at 1000mA ...
How does a Cisco PoE switch know how much voltage it's supposed to be sending??
Is there a negotiation process between the POE switch and the POE device ??

Yes there is a negotiation process-
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/power_over_ethernet.html

Power Over ethernet on Cisco switches - why??

I administer 3 servers (two g4 towers and one xserve attached to an XCraid) and 50 Macintosh workstations in an agency/production group within a fairly large company (2000+). Like most major companies the majority of the computer and servers are Windows based (specifically DELL) with CISCO switches.
I ran into a problem today where a switch was updated the "OS of the swithc" without my knowledge by our Infrastructure group. This resulted in a very high latency problem when pulling files from our Apple servers. After some digging we determined that the feature "Power Over Ethernet" had been disabled when they updated the switch's OS. Once we enabled PoE back on those ports, it was back to business.
My question here is, why does this feature have to be enabled? All DELL servers reconnected without a hitch. I hear PoE is only really resevered for VoiP devices and such. What is it with Apple servers that need this feature turned on?
Look forward to hear from you all.
Xserver, Xraid, G5, etc Mac OS X (10.4.6)

I can confirm that portfast makes a huge difference, as the autonegotiation between the switch and the client is performed inside of about 2 seconds, rather than the standard thrash-around period of about 40 seconds that some ethernet devices can use to determine line speed and simplex / duplex operation.
Turn on portfast on any switch ports that you don't plan on using for trunking / uplinking. When you do this, it tells the switch that there isn't a managed switch / router downstream, so it doesn't need to try to negotiate routing protocols and whatnot - it greatly speeds up the autonegotiation process.
Also, on some Cisco switches (We found it on a Cisco Catalyst 4006) if you lock the port to a specific operating speed / mode (e.g. 100Mbps / full duplex), the Mac doesn't like it nearly as much as if you leave it to autonegotiation. We were having the exact same issue the OP is seeing (limited bandwidth, massive CRC error count) until we put it back to auto and enabled portfast, and then we got the performance we expected, without recurrence of the issue.

Refurbished Cisco Switches, worth it for home lab?

Robert5205 wrote:
Cablesandkits.com has some great prices on old Cisco gear. This week they have a 3560 PoE 48-port switch for $150.
Yes, it is absolutely worth it to have real hardware in your hands. Packet tracing is fine, but it's not real life.
Yeah I believe they are being sold by Cablesandkits through newegg. Any suggestions on which switch or features I should look for? Really I want something that's managed but beyond that I'm not sure.

So I been thinking about getting a decent switch to play around with at home. During my search I found there's a good bit of "refurbished" Cisco switches online and was wondering if they are worth trying out. Figured they are beyond EOL hence the cheapness, the one I'm looking at is a Cisco 2900 series for like $30 bucks. Pretty new in IT and working on my Network+ and starting to look into the Cisco certs at the moment so having an actual Cisco switch would be useful.
This topic first appeared in the Spiceworks Community

POE Switches vs Non POE Devices

hi, since we installed our new POE switches in different point of services (C2960X Software (C2960X-UNIVERSALK9-M), Version 15.0 (2) EX5).
Sometimes power is discovered on non POE devices..And do a reset on the interface..
Generally these devices are UNIX cash register. The easy way to remedy to this problem is to disable the POE ..But we will eventually needs POE on each interfaces..
Someone has an idea of why the switch detect a POE device even if he is not? .. Or any workaround suggestion, we only need POE on our CISCO POE devices, LLDP is globally disabled.
Mar 17 10:55:14.022 EDT: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: IEEE PD
Mar 17 10:55:17.189 EDT: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/28: Power granted
Mar 17 10:55:17.301 EDT: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/28: PD removed
Mar 17 10:55:18.325 EDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/28, changed state to down
Mar 17 10:55:20.335 EDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/28, changed state to up

Like everyone has already pointed out, a PoE device will need to be connected directly to a 802.3af compliant PoE switch. If you only have one jack for every workstation, then you will have to connect the phone to the wall/switch, and connect the computer to the phone. If you have separate data and voice vlans (like you should), 802.1q will need to be configured for the port as well.
PoE injectors are a great if you have them installed here and there, but if every port has one it will be a mess and PITA to work with since there will be double the Ethernet and as many power cords as you have injectors.
I stated 802.3af earlier because I've come across "PoE" devices (mainly from ubiquity) that still need an injector even though the switch is PoE.

Windows 7 LLDP and Cisco Switches

Does Windows 7 support IEEE LLDP (not to be confused with MS LLTP). We have LLDP enabled on are Cisco Switches and want to be able to see are what ports the Windows 7 devices are connected to. Using the Cisco Show LLDP neighbors.

Hi,
I suggest you refer to the following article in MSDN blog:
Link Layer Topology Discovery Protocol Specification
http://msdn.microsoft.com/en-us/library/windows/hardware/gg463061.aspx
Thanks,
Vincent Wang
TechNet Community Support

Rrack mounting brackets for Cisco switch SF300-48P ?

Does anyone know how to get rack mounting brackets for Cisco switch SF300-48P ?

You might be able to get them through Cisco support. Check this thread: https://supportforums.cisco.com/discussion/11201291/sf-300-series-rack-mount-brackets

Has anyone develped an EM plug-in for Cisco switches or routers

Folks,
Has anyone develped an EM plug-in for Cisco switches or routers? Please reply to this thread if you have developed one and would like to share your experience in developing this plug-in?
Thanks,

It's probably not the conversion from CMYK to RGB that's causing the problem, but color profile (ICC) embedding in Photoshop. Fireworks doesn't read color profiles. You might be able to create an action to remove the color profile in Photoshop and then batch process the images with it.

NPS Discarding RADIUS request from Cisco switch (802.1x)

Last few weeks I've been busy to get the following to work:
- Cisco 2960 switch as the suppliant
- Another Cisco 2960 as the authenticator switch
- The supplicant is only able to send MS-EAP MS-ChapV2 requests
- The NPS server is Windows 2008 R2 (and also tested on 2012 R2)
This is called "NEAT" by Cisco; which does seem to work with Cisco ISE (http://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116681-config-neat-cise-00.html)
but I'd like to get it to work with Windows NPS.
Within NPS I've setup the following Connection Request policy:
- NAS Port Type: Ethernet
I'm using the following Network Policy:
- User Group: DOMAIN\Switches (the useraccount used by the switch is part of this group)
- NAS Port Type: Ethernet
- Autehntcation Type: EAP
Now the request sent by the switch is discarded. The actual error is the following (excluded irrelevant information):
User:
Account Name: Rotterdam-Switch-8-1
Account Domain: DOMAIN
Authentication Details:
Connection Request Policy Name: Secure Wired Connections
Network Policy Name: Switches Allowed
Authentication Provider: Windows
Authentication Server: SERVER.DOMAIN.local
Authentication Type: EAP
EAP Type: -
Account Session Identifier: -
Reason Code: 1
Reason: An internal error occurred. Check the system event log for additional information.
Wireshark on the NPS server shows:
1. The RADIUS Access-Request (1) being received by the NPS Server
2. The NPS Server sending out a RADIUS Access-Challenge (11) to the authenticator switch
3. Another RADIUS Access-Request (1) is beging received by the NPS Server
Packet 2 has an t=EAP-Message(79) with type MS-EAP-Authentication [Palekar](26) and MS-CHAPv2-ID set to 2 and OpCode 1 (Challange)
Packet 3 has an t=EAP-Message(79) with type MS-EAP-Authentication [Palekar](26) and MS-CHAPv2-ID set to 2 and OpCode 2 (Response)
I've also tried the following:
- I've also tested with an invalid username/password. The request is correctly denied
- I've also tested by added ALL EAP Types as condition to the Network Policy. The request isn't pickup by this policy anymore.
Any help would be greatly appriciated ofcourse.
Kind regards,
Peter

It only took like.. uhm.. forever.. but there's an answer which is "OK ish..".
Cisco 2960 switches support EAP-MSCHAP; but it seems that NPS only supports EAP-MSCHAP for VPN Connections and not for Wired/Wirelss authentication. Something to do with inner and outer methods and NPS requireing PEAP as an outer method for Wired/Wirelss
authentication.
End result is that both the Cisco switches and NPS do support EAP-MD5. Though it's definitly not as secure (at all), it's definitly a step in the right direction and it's something that we'll be implementing.
Now it seems that NPS doesn't support EAP-MD5 (which is supposidly depricated), it's possible to re-enable it. Using the following articles.
http://support.microsoft.com/kb/922574/en-us
Microsft mentioned me that "Though this article says it applies to Windows Vista only, it does apply to Server 2008R2 as well. Also I would suggest you the following link:
http://support.microsoft.com/kb/981190"
Please note that you'll have to enable 'Store password using reversible encryption’ on the accounts that will be used for NEAT authentication.
All though I would have hoped EAP-MSCHAPv2 would work, I feel I do need to clarify that I understand Microsoft's point of view on this as well. They feel EAP methods without PEAP are simply not safe; which is understandable, espcially for EAP-MD5 which
could be sniffer using a hub/repeater/etc.
Kind regards,
Peter

DACL does not get downloaded to Cisco Switch from ISE

Hello,
I have a cisco switch with ios: c3550-ipbasek9-mz.122-44.SE6.bin
I am trying to push dACL fro my ISE device into the switch, but it is not getting applied to switch.   dynamic vlan assignment workds fine, but dACL doesnot apply
Any instruction plz?

Hi Jatin,
ISE is properly configured for dACL,   i think there is some compatibility issue on cisco switch ios.
following is the debug output>>
06:36:43: dot1x-packet:Received an EAP packet on interface FastEthernet0/11
06:36:43: EAPOL pak dump rx
06:36:43: EAPOL Version: 0x1 type: 0x0 length: 0x0006
06:36:43: dot1x-packet:Received an EAP packet on the FastEthernet0/11 from mac 0019.b981.e812
06:36:43: dot1x-sm:Posting EAPOL_EAP on Client=1D68028
06:36:43:     dot1x_auth_bend Fa0/11: during state auth_bend_request, got event 6(eapolEap)
06:36:43: @@@ dot1x_auth_bend Fa0/11: auth_bend_request -> auth_bend_response
06:36:43: dot1x-sm:Fa0/11:0019.b981.e812:auth_bend_response_enter called
06:36:43: dot1x-ev:dot1x_sendRespToServer: Response sent to the server from 0019.b981.e812
06:36:43: dot1x-sm:Fa0/11:0019.b981.e812:auth_bend_request_response_action called
06:36:43: RADIUS/ENCODE(00000049):Orig. component type = DOT1X
06:36:43: RADIUS(00000049): Config NAS IP: 192.168.2.250
06:36:43: RADIUS/ENCODE(00000049): acct_session_id: 73
06:36:43: RADIUS(00000049): sending
06:36:43: RADIUS(00000049): Send Access-Request to 192.168.2.231:1812 id 1645/99, len 267
06:36:43: RADIUS: authenticator 5B 61 1D 64 D3 D5 9F AD - 23 E0 11 11 B3 C3 5C 81
06:36:43: RADIUS: User-Name           [1]   6   "test"
06:36:43: RADIUS: Service-Type        [6]   6   Framed                    [2]
06:36:43: RADIUS: Framed-MTU          [12] 6   1500
06:36:43: RADIUS: Called-Station-Id   [30] 19 "00-11-5C-6E-5E-0B"
06:36:43: RADIUS: Calling-Station-Id [31] 19 "00-19-B9-81-E8-12"
06:36:43: RADIUS: EAP-Message         [79] 8
06:36:43: RADIUS:   02 7A 00 06 0D 00                 [ z]
06:36:43: RADIUS: Message-Authenticato[80] 18
06:36:43: RADIUS:   A6 AB 5A CA ED B8 B4 1E 36 00 9D AB 1A F6 B9 E0                [ Z6]
06:36:43: RADIUS: Vendor, Cisco       [26] 49
06:36:43: RADIUS:   Cisco AVpair       [1]   43 "audit-session-id=C0A802FA0000006F016B36D8"
06:36:43: RADIUS: NAS-Port-Type       [61] 6   Ethernet                  [15]
06:36:43: RADIUS: NAS-Port            [5]   6   50011
06:36:43: RADIUS: NAS-Port-Id         [87] 18 "FastEthernet0/11"
06:36:43: RADIUS: State               [24] 80
06:36:43: RADIUS:   33 37 43 50 4D 53 65 73 73 69 6F 6E 49 44 3D 43 [37CPMSessionID=C]
06:36:43: RADIUS:   30 41 38 30 32 46 41 30 30 30 30 30 30 36 46 30 [0A802FA0000006F0]
06:36:43: RADIUS:   31 36 42 33 36 44 38 3B 33 35 53 65 73 73 69 6F [16B36D8;35Sessio]
06:36:43: RADIUS:   6E 49 44 3D 69 73 65 2D 73 65 72 76 65 72 2D 31 [nID=ise-server-1]
06:36:43: RADIUS:   2F 31 37 31 30 32 35 39 38 38 2F 32 34 3B    [ /171025988/24;]
06:36:43: RADIUS: NAS-IP-Address      [4]   6   192.168.2.250
06:36:43: %LINK-3-UPDOWN: Interface FastEthernet0/11, changed state to up
06:36:43: RADIUS: Received from id 1645/99 192.168.2.231:1812, Access-Challenge, len 1134
06:36:43: RADIUS: authenticator 78 36 A3 38 30 1C F0 7A - 19 83 93 81 B4 6B FF 9E
06:36:43: RADIUS: State               [24] 80
06:36:43: RADIUS:   33 37 43 50 4D 53 65 73 73 69 6F 6E 49 44 3D 43 [37CPMSessionID=C]
06:36:43: RADIUS:   30 41 38 30 32 46 41 30 30 30 30 30 30 36 46 30 [0A802FA0000006F0]
06:36:43: RADIUS:   31 36 42 33 36 44 38 3B 33 35 53 65 73 73 69 6F [16B36D8;35Sessio]
06:36:43: RADIUS:   6E 49 44 3D 69 73 65 2D 73 65 72 76 65 72 2D 31 [nID=ise-server-1]
06:36:43: RADIUS:   2F 31 37 31 30 32 35 39 38 38 2F 32 34 3B    [ /171025988/24;]
06:36:43: RADIUS: EAP-Message         [79] 255
06:36:43: RADIUS:   4D 5D 13 47 FC 46 16 EE 62 76 40 09 77 48 31 B6 01 6B 5E 52 33 56 A2 1E 34 [M]GFbv@wH1k^R3V4]
06:36:43: RADIUS:   02 32 39 FA 4D CA 79 18 4A 42 A2 4E 5C BD AE 29 D2 3D D1 5A FC C2 ED 3E E5 FB C6 B8 D8 DE A8 75 EB 3A A5 7D 02 03 01 00 01 A3 81 CD 30 [29MyJBN\)=Z>u:}0]
06:36:43: RADIUS:   81 CA 30 0B 06 03 55 1D 0F 04 04 03 02 01 86 30 0F 06 03 55 1D 13 01 01 FF 04 05 30 03 01 01 FF 30 1D 06 03 55 1D 0E 04 16 04 14 C4 56 80 A7 C9 18 50 92 EE CC 91 D4 E1 EC DB AD E7 1E 70 A8 30 79 06 03 55 1D 1F 04 72 30 70 [0U0U00UVPp0yUr0p]
06:36:43: RADIUS:   30 6E A0 6C A0 6A 86 32 68 74 74 70 3A 2F 2F 73 79 73 6C [0nlj2http://sysl]
06:36:43: RADIUS:   6F 67 2D 73 65 72 76 65 72 2F 43 65 72 74 45 6E [og-server/CertEn]
06:36:43: RADIUS:   72 6F 6C 6C 2F 46 4D 46 42 5F 54 72 75 73 74 65 [roll/FMFB_Truste]
06:36:43: RADIUS:   64 43 41 2E 63 72 6C 86 34 66 69 6C 65 3A 2F 2F 5C [dCA.crl4file://\]
06:36:43: RADIUS:   5C 73 79 73 6C 6F 67 2D 73 65 72 76 65 72 5C 43 [\syslog-server\C]
06:36:43: RADIUS:   65 72 74 45 6E 72 6F 6C 6C 5C 46 4D 46 42 5F 54 [ertEnroll\FMFB_T]
06:36:43: RADIUS:   72 75 73 74 65 64 43 41 2E         [ rustedCA.]
06:36:43: RADIUS: EAP-Message         [79] 251
06:36:43: RADIUS:   63 72 6C 30 10 06 09 2B 06 01 04 01 82 37 15 01 04 03 02 01 00 30 0D 06 09 2A 86 48 86 F7 0D 01 01 05 05 00 03 82 01 01 00 63 BA F8 CE D5 8B 0E 94 77 AE 86 6C 37 AB 2F 36 9A B2 85 D5 4A [crl0+70*Hcwl7/6J]
06:36:43: RADIUS:   74 8C 33 F5 93 06 A6 57 8D 39 56 8F 02 08 97 CB C6 08 70 8C 22 1E 5D 1F A8 26 6D 60 1F 05 62 D1 24 AB 03 8C 41 F8 1C F1 F8 C2 87 8B 97 02 71 FC 6A [t3W9Vp"]&m`b$Aqj]
06:36:43: RADIUS:   EB 12 FC DD 8C 5C 9C 2D AF D2 C4 1C 18 1B 40 BE 78 B0 54 55 59 89 03 1B B7 FB 91 85 EE CA C0 18 1C 78 5D 4D BA FA 9E 44 D3 45 53 A3 BE 46 8A FB 81 BD F1 4C B3 3B [\-@xTUYx]MDESFL;]
06:36:43: RADIUS:   D6 66 7E 5B 79 9F 83 53 5E 49 92 B5 7F E5 1A E2 86 8C 83 96 7D 75 A5 1D 08 4E 32 C3 5E EC BF 28 53 EC 53 8A C3 E0 36 [f~[yS^I}uN2^(SS6]
06:36:43: RADIUS:   82 EE AA 0D 38 3E BA 9C 1D D9 24 BD 48 A6 EE 44 BD 95 68 85 CA 8C 44 F8 E8 A2 FB 94 BC 6F 7C F2 06 91 6C A0 A6 BB 7B 7F 56 BD 15 32 A4     [ 8>$HDhDo|l{V2]
06:36:43: RADIUS: Message-Authenticato[80] 18
06:36:43: RADIUS:   DD 82 F7 10 3F C7 B5 62 9B 2A BB 24 16 A7 59 33            [ ?b*$Y3]
06:36:44: RADIUS(00000049): Received from id 1645/99
06:36:44: RADIUS/DECODE: EAP-Message fragments, 253+253+253+249, total 1008 bytes
06:36:44: dot1x-packet:Received an EAP request packet from EAP for mac 0019.b981.e812
06:36:44: dot1x-sm:Posting EAP_REQ on Client=1D68028
06:36:44:     dot1x_auth_bend Fa0/11: during state auth_bend_response, got event 7(eapReq)
06:36:44: @@@ dot1x_auth_bend Fa0/11: auth_bend_response -> auth_bend_request
06:36:44: dot1x-sm:Fa0/11:0019.b981.e812:auth_bend_response_exit called
06:36:44: dot1x-sm:Fa0/11:0019.b981.e812:auth_bend_request_enter called
06:36:44: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1 id: 0x7B length: 0x03F0 type: 0xD data: @Cfui[ab2,Jt1){                                                                                                                              2]g&GZ1pIbu;+Ga;iF"jy#
oohuV.aFZ4_|
P0`At   )B
06:36:44: dot1x-ev:FastEthernet0/11:Sending EAPOL packet to group PAE address
06:36:44: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/11.
06:36:44: RADIUS: Message-Authenticato[80] 18
06:36:44: RADIUS:   F5 B0 56 D3 C6 87 BD 10 6E C7 4A 72 5B 5C 60 C5           [ VnJr[\`]
06:36:44: RADIUS: Vendor, Cisco       [26] 49
06:36:44: RADIUS:   Cisco AVpair       [1]   43 "audit-session-id=C0A802FA0000006F016B36D8"
06:36:44: RADIUS: NAS-Port-Type       [61] 6   Ethernet                  [15]
06:36:44: RADIUS: NAS-Port            [5]   6   50011
06:36:44: RADIUS: NAS-Port-Id         [87] 18 "FastEthernet0/11"
06:36:44: RADIUS: State               [24] 80
06:36:44: RADIUS:   33 37 43 50 4D 53 65 73 73 69 6F 6E 49 44 3D 43 [37CPMSessionID=C]
06:36:44: RADIUS:   30 41 38 30 32 46 41 30 30 30 30 30 30 36 46 30 [0A802FA0000006F0]
06:36:45: dot1x-ev:FastEthernet0/11:Sending EAPOL packet to group PAE address
06:36:45: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/11.
06:36:45: dot1x-registry:registry:dot1x_ether_macaddr called
06:36:45: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet0/11
06:36:45: EAPOL pak dump Tx
06:36:45: EAPOL Version: 0x2 type: 0x0 length: 0x0039
06:36:45: EAP code: 0x1 id: 0x7E length: 0x0039 type: 0xD
06:36:45: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (0019.b981.e812)
06:36:45: dot1x-sm:Fa0/11:0019.b981.e812:auth_bend_response_request_action called
06:36:46: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet0/11.
06:36:46: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q
06:36:46: dot1x-ev:Enqueued the eapol packet to the global authenticator queue
06:36:46: EAPOL pak dump rx
06:36:46: EAPOL Version: 0x1 type: 0x0 length: 0x0006
06:36:46: dot1x-ev:
dot1x_auth_queue_event: Int Fa0/11 CODE= 2,TYPE= 13,LEN= 6
06:36:46: dot1x-packet:Received an EAPOL frame on interface FastEthernet0/11
06:36:46: dot1x-ev:Received pkt saddr =0019.b981.e812 , daddr = 0180.c200.0003,
                    pae-ether-type = 888e.0100.0006
06:36:46: dot1x-ev:dot1x_auth_process_eapol: EAPOL flag status of the port Fa0/11 is TRUE

Cisco Switch 2690 Si PoE-48

Similar Messages

Maybe you are looking for