Guest

Preview Tool

Cisco Bug: CSCuq08591 - dot1x with Alcatel: IOS clear session after receiving identity response

Last Modified

Sep 14, 2019

Products (1)

  • Cisco IOS

Known Affected Releases

15.0(2.0.4)

Description (partial)

Symptom:
For dot1x switch is sending identity request and getting identity response from supplicant. After getting that response it should be transported via radius to AAA server. But instead switch is clearing the session (posting RESTART).
The result is failed dot1x.

Conditions:
The problem occurs only for Alcatel phones. All phones configured to use EAP-MD5.
The problem occurs for both:
- Alcatel phones with PC connected
- Alcatel phones without PC connected
Customer does not have any other phones.
PC connected directly does not have that problem.
Problem is intermittent, occurs sometimes. We are able to trigger it sometimes by enable/disable "authentication open". 
Problem occurs on different platforms (3560, 3750) and different versions of software (attached debugs from 15.0.2SE4).
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.