Switchport Stuck in Guest Mode

I am using 802.1x authentication with multi-domain ports; Phone and PC connected to phone. The phones are Nortel (Avaya) and the PCs are Dell/HP Laptops. All are configured for Certificate authentication and this works well. However we sometimes get some ports stuck in Guest mode. when a non certificated laptop connects to a phone port and fails authentication, the data port is placed in the Guest VLAN. However when the laptop disconnects the port isn't reset and remains in the guest state. When a subsequent good laptop connects and attempts to authenticate the switch ignores this and leaves the data port in the Guest VLAN. Anyone any idea why this happens and how I can overcome it?
The switch is a 2960S with Version 12.2(58)SE2 IOS.
The port is configured as follows:
interface GigabitEthernet1/0/15
description DANS Port
switchport access vlan 1807
switchport mode access
switchport voice vlan 1855
priority-queue out
authentication event fail action authorize vlan 1871
authentication event no-response action authorize vlan 1871
authentication host-mode multi-domain
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 7
dot1x max-reauth-req 10
spanning-tree portfast
service-policy input INGRESS-CLASSIFY
end
The auth status and mac addresses on the port after the failed laptop disconnects are as follows:
sh auth sess inter g1/0/15
            Interface:  GigabitEthernet1/0/15
          MAC Address:  Unknown
           IP Address:  Unknown
            User-Name:  UNRESPONSIVE
               Status:  Authz Success
               Domain:  DATA
       Oper host mode:  multi-host
     Oper control dir:  both
        Authorized By:  Guest Vlan
          Vlan Policy:  1871
      Session timeout:  N/A
         Idle timeout:  N/A
    Common Session ID:  0AEF212D000003055C8D1DAC
      Acct Session ID:  0x00000653
               Handle:  0x94000306
Runnable methods list:
       Method   State
       mab      Failed over
       dot1x    Failed over
            Interface:  GigabitEthernet1/0/15
          MAC Address:  0022.67cd.0eec
           IP Address:  Unknown
            User-Name:  RBT18991
               Status:  Authz Success
               Domain:  VOICE
       Oper host mode:  multi-domain
     Oper control dir:  both
        Authorized By:  Authentication Server
      Session timeout:  N/A
         Idle timeout:  N/A
    Common Session ID:  0AEF212D00000026000286D1
      Acct Session ID:  0x00000028
               Handle:  0xFC000027
Runnable methods list:
       Method   State
       mab      Not run
       dot1x    Authc Success
sh mac address-table int g1/0/15      
          Mac Address Table
Vlan    Mac Address       Type        Ports
1855    0022.67cd.0eec    STATIC      Gi1/0/15
Total Mac Addresses for this criterion: 1
I placed the AAA, dot1x, eap and auth debug on for all events and then connected a good laptop, the only debug message I got were as follows:
Mar 19 16:17:01.391 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:17:01.653 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:17:02.654 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:17:03.708 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_auth_client_present: client for mac address 0022.67cd.0eec has been notified on GigabitEthernet1/0/15
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_auth_client_authorized: client for mac address 0022.67cd.0eec is authorized GigabitEthernet1/0/15
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_auth_client_present: client for mac address 0022.67cd.0eec has been notified on GigabitEthernet1/0/15
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open autn
Mar 19 16:17:01.391 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:17:01.653 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:17:02.654 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:17:03.708 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open aut
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_auth_client_present: client for mac address 0022.67cd.0eec has been notified on GigabitEthernet1/0/15
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_auth_client_authorized: client for mac address 0022.67cd.0eec is authorized GigabitEthernet1/0/15
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_auth_client_present: client for mac address 0022.67cd.0eec has been notified on GigabitEthernet1/0/15
Mar 19 16:18:43.784 GMT: AUTH-EVENT (Gi1/0/15) dot1x_switch_is_restrictive_vlan_open_auth:Multi-Host with Guest Vlan/Auth Fail Vlan or open autn
I would have expected the auth function to have reacted to the EAP packets sent by the good client when it connected and performed eap authentication but it didn't, all it did was say the ports in Guest mode and left the laptop in this VLAN.
All help will be much appreciated.
Thanks,
Paul

Thanks for this reply, although it does provide valuable information for the "Cisco" world it doesn't help me with the problem I have.
The big question is as follows:
Why doesn't the switch react to the EAP packets it gets from the good laptop connected to the port stuck in the Guest state. The port doesn't have a data MAC in its table for the port, only a Voice MAC. It recognises a device has connected as it then places the good laptops MAC in the table BUT it totally ignores the EAP packets from this device and leaves it in the Guest VLAN where the laptop gets a DHCP address once its EAP has timed out.
Completely wrong activity!!!
Is this a bug?
Any help is much appreciated.
Regards,
Paul

Similar Messages

  • Got stuck in guest mode

    I was browsing the internet and downloaded video converter on app store, suddenly a message comes up and said i need to restart press the power button then turn it on again. There was no option of canceling the message that popped up. Then so i did restart my macbook pro. Now im stuck in guest mode. Can someone help me? Im really frustrated to get out of guest mode.

    no need to post again so soon, give people time: https://discussions.apple.com/message/23333421#23333421

  • Stuck in guest mode

    cannot figure out how to sign back in to my account.  I'm stuck in guest mode

    Reboot and hold down the option key at the chime. If your startup volume ("Macintosh HD," unless you renamed it) appears in the list of available boot devices, select it and press return.

  • After recovering password Iam locked in guest mode

    after recovering my pasword I am stuck in Guest Mode or Emergency Mode wht do I do to get to my accounts?

    bump

  • Guest Mode?

    Can an 1100 AP support trunking? Here is what I want to do.
    The switchport is configured for a specific vlan so everything in the wireless cloud is on that vlan currently (LEAP/WEP). I want to setup a seperate open Guest SSID vlan and put it in the same vlan that the outside of my PIX is in. Then build an access list to only allow a few ports open. Like HTTP, VPN, and POP so they can get to the internet/corporate network without hacking into anything.
    Is there a better way of doing a guest mode? Can my idea work?

    The way we do it is we have a guest vlan. This VLAN has no route (no interface VLAN X)on the RSP/RSM, so there is no is way onto the Corporate network. We use an extra interface on the pix(connected to the guest VLAN) which in turn serves as DHCP server and only allows traffic to the web. We also added a small ip pool to the global nat to allow visiting guests to be able VPN out to their home office.

  • HP photosmart 6510 stuck in sleep mode

    My 6510 once it has been idle anytime from a few hours to several days, the printer will not print anything in the que. I get the message "Printer not Responding". I assume that it is stuck in sleep mode. The only fix is to unplug the power cord and plug it back in. This doesn not solve the problem as I have to do it every time if I haven't printed in a while. I have disabled auto-off but that doesn't seem to work.  Any fixes?

    These settings are for setting up your wireless printer to stay connected to your router, keep wireless devices better connected and make your router secure and hack proof.
    1. Set a static IP in the printer (click here) outside the DHCP range of the router (check your manual).
       This is for Linksys routers but can be used for all routers. Verify your DHCP range and change this
       first if needed. More Wireless Printing help is here.
    2. Verify in the printer that 'Auto Off' is disabled.  Use the Embedded Web Server (EWS) by going to the
       printers IP address in your browsers address bar, click Settings Tab/Auto Off. Or use the Printer
       Assistant, Printer Home Page (EWS).
    In the router: (Refer to your router manual for information)
    3. Use a fixed wireless channel like 1, 6 or 11, never 'auto', try channel 1 first then the rest. 
    4. Set router to 20Mhz only, or 145Mbps depending on router. 
    5. Always use WPA2-AES (Personal) encryption, but you can try ‘mixed’ mode. 
    6. Disable WPS and never use it and disable UPnP for the routers security. Nobody can hack your
       system now and helps with wireless connectivity (if you want to know why, search the web).
    7. If you have a dual band router (2.4Ghz and 5.0Ghz bands), make sure the SSID’s are NOT the same,
       they must be different for all bands, even for any Guest networks.
    8. Save all settings. Power off both, wait 2 mins.  Power on router wait 2 mins. 
    9. Power on printer and verify it reconnects to router. 
    Windows 7/8/8.1   Is Network Discovery on or off?
    Control Panel/Network and Internet/Network and Sharing Center/Advanced sharing settings.
    Under Home or Work (current profile) / Network Discovery.
    Select "Turn on network discovery" and save changes.
    Say thanks by clicking the Kudos Thumbs Up to the right in the post.
    If my post resolved your problem, please mark it as an Accepted Solution ...
    I worked for HP but now I'm retired!

  • My iPod Touch is stuck in recovery mode after I left it on while updating!!!

    I was updating my ipod touch 3rd generation (ios 4.3, i think) and I saw a wasp and left the computer on in the middle of the updating process and now the ipod is stuck in recovery mode and it says the only way to get it out is to recover it, but that will erase everything!!! HELP ME!!! until i get an answer      I HATE YOU, APPLE URGG
    operating system: whatever the latest available to itouch is.

    Without knowing what the error message said all I can suggest is:
    - iOS: Not responding or does not turn on
    - Also try DFU mode after try recovery mode
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
    - If not successful and you can't fully turn the iOS device fully off, let the battery fully drain. After charging for an least an hour try the above again.
    - Try on another computer                            
    - If still not successful that usually indicates a hardware problem and an appointment at the Genius Bar of an Apple store is in order.
    Apple Retail Store - Genius Bar                                     

  • Ipod classic 120 stuck in disk mode, not recognized by windows or itunes

    so ive been havin tons of problems with my new ipod 120 classic
    first one day when i plugged it in it told me it was corrupted and needed to be restored
    then it would not restore
    i formated it with windows but that didnt seem to do anything
    the other night somehow i got it to the point of naming my ipod but after that, it stopped working again
    for a while i couldnt even put it into disk mode
    now, when it is plugged into the computer it is stuck in disk mode, yet not recognized by the computer or itunes
    it makes the sound when i plug it in but never shows up
    also, when its not plugged in, it starts up and just brings me to a screen that says use itunes to restore. but then i plug it in and it goes right to disk mode and do not connect, and isnt recognized
    when i unplug it i can see it pop up on my computer for that one second i unplug it
    ive tried this on a number of computers and it does the same thing
    when i unplug it from being plugged into the computer it just sits in diskmode saying ok to connect
    if i reset it by pressing center and menu, it just goes back to the use itunes to restore screen
    i cant get it to enter diagnostic mode, and when i hit center and play after center and menu it does nothing either
    ive just about had it with ipods
    this is my 3rd or 4th classic that i have had problems with
    apple should be ashamed of themselves for such a buggy product for so much money, and very very crappy service
    any help greatly appreciated....but im prety sure ill be moving onto another product after this
    luckily i am still under warranty so they offered for me to send it in....but then i am without music for about a week
    i feel i should be compensated for that alone, aside from just fixing it for me
    please help me fix this so i can get back to some tunes!
    thanks for any info

    1. Turn off iPad. Press and hold the Sleep/Wake button for a few seconds until the red slider appears, slide to turn off.
    2. Connect USB cable to computer
    3. Press and hold the Home button down and connect the docking end of cable to iPad
    4. Continue holding the Home button until you see the "Connect To iTune" screen
    5. Release the Home button
    6. Open iTune (make sure you have the newest version of iTune)
    7. You should see "iTunes has detected an iPad in recovery mode"
    8. Use iTune to restore iPad
    Note: You need to be patient and repeat the above many times to recover your iPad

  • TS1369 Tried to restore my ipod classic on a windows computer... there was some sort of failure and it is now stuck in "disk mode."  The ipod is no longer being recognized by itunes.

    Tried to restore my ipod classic on a windows computer... there was some sort of failure and it is now stuck in "disk mode."  The ipod is no longer being recognized by itunes.

    I am having the exact same problem.  My ipod has been stuck in disk mode for over two hours and now itunes is frozen.

  • Macbook Pro 17" (Mid-2009) Randomly Getting Stuck in Sleep Mode when Unplugged

    Hey guys, this is my first time posting so please excuse me if I do anything wrong. Here's the issue:
    I have a Macbook Pro 17" (Mid-2009) that has had an issue with the whole computer shutting down at random, but only when unplugged from the MagSafe power adapter. Upon scouring all the forums and discussions I could, I haven't found anyone with the same exact circumstances as myself, hence this post. Let me explain.
    Many say it's a battery issue. That can't be, because this has been happening for months, and after I finally got my laptop repaired a few days ago, it still occurs. I had sent it in for a logic board failure, but consented them to fix any other parts that weren't functioning properly. Upon the return of my machine, I found that they installed a fresh hard drive, new battery, new logic board, and a new speaker on the right side. This must mean that neither the logic board nor the battery are the issue.
    What else can this point to? Again, it only occurs when the Mac is unplugged from a power source, and it doesn't totally shut down. It goes half way, essentially stuck in sleep mode. The white indicator light on the front freezes, and the power button has to be held to fully turn the laptop off, then pressed again to reboot. It can last anywhere from a single minute to a few hours before shutting off again, and it's always the exact same circumstance, no matter what kind of computing I'm doing at the time.
    Note that while no one else has found the solution to lie within resetting the PRAM or SMC (in the discussions I read), I still need to try that tonight and see if it affects anything.
    Thanks in advance,
    Sean

    Macs are having problems with SSD drives. The root cause is the OS X journaling file system. The Apple-written SATA controller driver can saturate the bus at times, inhibiting performance. Some manufactures are even selling special "Mac" versions of their SSD drives that are slowed down on purpose to compensate for this problem. Unfortunately, the problem still exists in Snow Leopard, from what I've read.
    Also, I read that Apple has secretly slowed the recent new laptops down (3.0GB/s to 1.5GB/s) to compensate for the problem.
    Dave M.
    MacOSG Founder/Ambassador  An Apple User Group  iTunes: MacOSG Podcast
    Macsimum News Associate Editor  Creator of 'Mac611 - Mobile Mac Support'

  • MacBook Pro- Stuck in safe mode!?

    Hi, I am a first-time MacBook user and need a little help...
    I am running lion software and recently performed a software update (pop-up screen general update). Since doing this, my Mac is now:
    - Only allowing me to type in Shift Mode i.e. I cannot type '1' but it types '!', '3' becomes '£', etc etc
    - Stuck in safe mode
    - Will not recognise any USB's (however i suspect this is because it's stuck in safe mode!)
    Any help would be much appreciated??? I cannot use it any more, and it makes me just want to get rid of it! :-(
    Thanks in advance....... :-)

    Try resetting the SMC - http://support.apple.com/kb/HT3964 - see the drop-down menu on "Resetting the SMC on portables with a battery you should not remove on your own."
    Good luck,
    Clinton

  • MacBook Pro stuck in sleep mode: can't restart or shut down, black screen

    I'm running the latest version of Snow Leopard on my mid-2009 MacBook Pro Unibody. After installing the latest Software Update, including a Firmware update for my SuperDrive, the following problem has occurred, for the very first time:
    I closed the lid of my laptop for the night, as I do routinely every night, thus putting my MBP to sleep. I leave the various apps open, usually Firefox, iTunes and Entourage. The next morning my MBP felt hot and the screen remained black... it would not change. After repeatedly trying and failing to clear the black screen and bring my apps up, I held the power button down to do a complete Shut Down. My system turned off, but did not do an actual Shut Down. When I press the power button to turn it on, it comes right back into sleep mode with the screen remaining black. I cannot seem to force either a Shut Down or a Restart. I unplugged all peripherals and the power cord, let my MBP cool down completely--for a couple of hours-- and tried everything again. Still no change: I'm stuck in sleep mode with a black screen. I've also tried resetting the PRAM and the SMC, but neither works, probably because I'm not coming from a Shut Down. Is anybody else having this problem? Anyone have any suggestions? I think the problem must be somehow related to the latest update, but whatever it is, I'd like to resolve it.
    Thanks in advance for any help.

    I can't get into my system to see my update version, but I'm certain I'm running the most up-to-date version of Snow Leopard and all other latest updates applicable to my mid-2009 MBP, as I run Software Update routinely. I thoroughly completed all update installations, including the SuperDrive Firmware update, followed all instructions meticulously, including rebooting, and actually used my system for at least one full day without any problems. I'd even recently repaired all permissions. Everything was "humming" along very well. This problem came totally out of the blue. Because the screen is black, I can't actually see what's on it; however, I've put my MBP to sleep every night by closing the lid and it awakens in the morning when I raise the lid. This time the sleep light indicator is on, but nothing happens when I lift the lid, touch the track pad or a key. If I hold the power button down briefly, the sleep light goes out, but when I press the power button again, the light comes right back on. If I depress the power button for several seconds, to initiate a shutdown or restart, it simply shuts off the fan and refuses to completely shut down. This is evidenced by the fact that depressing the power button to start up brings the sleep light on very quickly. I can tell by the way the system sounds that it is on behind the blackened screen. Sorry I can't get you the update versions.
    Thanks

  • Locked out of Guest mode on iphone 5 help?

    so I have guest mode enabled on my iPhone and I accidently triple clicked and I don't remember the passcode Ugh.
    I Don't want to restore my phone and I tried going on itunes to try to restart it and nothing? Please help

    There is no "Guest Mode" on an iPhone. Perhaps you mean Guided Access? If you don't remember the passcode, you may have to restore your phone. However, try resetting it first by pressing and holding the Home and power buttons until the apple appears.

  • Help! I finally decided to update my ipad from itunes/laptop & now its stuck in recovery mode!

    Hi guys. I just saw this same question from someone else but after i logged into support I cant find the post anywhere. I hate asking again, sorry for asking again, but I need HELP and cant keep searching the posts.
    Ive never updated ipad 2 before and not really good with computers. When trying to download certain apps, it would stop installing & tell me i needed to update to the latest update. Finally updated the ipad & i think syncd it but when it was done the only thing that showed up on screen is the RESTORE picture. I just realized that if i restore i will loose all my Memos & Notes. I DONT WANT TO LOOSE THEM ! I have info on ipad memo that I really need & that i didnt write down anywhere else. Is there a way to save my notes/memos/data before I restore the ipad? Ive gone 5 days without it and really need to use it. Am i just out of luck :{ ?
    There was an answer by someone about restoring an ipad giving directions and after the restore it will ask u questions that u have to answer YES to. She had school notes and the other guy had 600 pics. The girl stated she did all the steps but she didnt see anyplace to say Yes and she lost everything. Im afraid to risk it and will take it to a store or something if theres away they can do it.
    I babbled and im sorry if this made no sense so heres the clear question : Is there a way to save your memos, messages, notes, contacts, etc from an ipad that is stuck in restore mode BEFORE U restore? any help will be so appreciated !!!

    iPad: Basic troubleshooting
    http://support.apple.com/kb/TS3274
    Update and restore alert messages on iPhone, iPad, and iPod touch
    http://www.buybuyla.com/tech/view/012953a0d412000e.shtml
    iOS: Resolving update and restore alert messages
    http://support.apple.com/kb/TS1275
    iPad: Unable to update or restore
    http://support.apple.com/kb/ht4097
    iTunes: Specific update-and-restore error messages and advanced troubleshooting
    http://support.apple.com/kb/TS3694
    If you can’t update or restore your iOS device
    http://support.apple.com/kb/ht1808
     Cheers, Tom

  • Mac stuck in safe mode start up loop

    Hi everyone,
    it seems I have run into a problem and can't find answers online.
    First off I have a MacBook intel core duo on the latest snow leopard and mac software is up to date.
    It all started when I had to restore my iPhone and it had some problems and got stuck in dfu mode, so when I decided to reboot it I unpluged it and went to reboot and problems started. Finder kept crashing. When I started up in safe mode I decided to save some important files and when I was done the finder problems persisted even while in safe mode. When I rebooted it would start up in safe mode and the loading bar on the bottom would get about a fifth of the way and stop, it would try again and get the as far as before and then shut down.
    I tried taking out and putting back in the HD and ram as well as verbose mode. It says
    Disk0s2: I/o error
    invalid node structure
    (8, 12827)
    **the volume mac HD could not be verified completely.
    /dev/rdisk0s2 (hfs) exited with signal 8
    When I decided all was hopeless I tried reinstalling the os but it got stuck on examining additional disks.
    If you need any info let me know. HUGE thanks ahead of time as I am writing this from my iPhone 2g and have a useless MacBook and dfu'd iPhone 4.

    Restart from your installer disc. Do not run the installer. Instead, from the Utilities menu select Disk Utility & run its Repair Disk step. If it can repair the HD, try reinstalling the OS again. If it cannot, you can try a more powerful (& expensive) disk repair utility like Disk Warrior, which may or may not be able to repair the damage. Otherwise, you will need to reformat the HD (losing all its data) to recover.
    You should always have a backup of your data. If you do not, it may be worth gambling on the price of Disk Warrior, but remember that there are no guarantees it can repair the damage.

Maybe you are looking for

  • How to create procedure having delete statement with between function?

    I am very new in SQL Development, I want to create a procedure having two date variable start and end and these two variable i want to use in procedure body to delete data from a specific table between two date duration. Please guide Thanks,

  • How to get Labview RT to Display a Front Panel on the Graphics port

    I suspect that this post belongs on the feature request board but I'll ask anyway. Most of my systems require a seperate PC for a SCADA/HMI/User interface linked to the RT controller using Network Published Shared Variables. I understand that Remote

  • Not able to connect to database through JSP page

    Hello Everyone, I'm creating a simple JSP page (helloworld.jsp) that would get info from the db and display it but when I point my browser to http://localhost:8080/helloworld.jsp, I get ClassNotFound exception. <html> <head> <title>My first JSP page

  • GeoRaster querying returns negative and invalid cell coordinates

    Hi! I'm using Oracle 10.2.0.1 and loading raster data into GeoRaster - loading all works but when querying cell coordinates I get negative and unexpected values. Here is my process: -- Create GeoRaster table DROP TABLE tm; CREATE TABLE tm (id NUMBER,

  • Trying to update payment information site won't work

    I am trying to update my payment yet the site says that it is under maintenance or something like that. It says that it will be back soon and I should check later however I have no access to my music and I would like to get my premium membership back