Preview Tool

Cisco Bug: CSCsz67852 - An EAP Request is sent to supplicant during Critical Authorization

Last Modified

Oct 04, 2013

Products (1)

  • Cisco IOS

Known Affected Releases


Description (partial)

When a switch knows that the AAA server is DEAD and a supplicant plugs into the port (that is configured for Critical Authorization) and send s an EAPoL Start, the switch responds with an EAP Request, and the supplicant responds with an EAP Response, at which point the supplicant sends an EAP Success after authorizing the port in the Critical VLAN.

The correct behavior should be that the switch does not send the EAP Request but send authorize in the Critical VLAN and just send out an EAP Success.

Issue is only seen when Critical Authentication is configured.
Bug details contain sensitive information and therefore require a account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.