Guest

Preview Tool

Cisco Bug: CSCus32281 - port displays as amber but did not get into err-disabled status

Last Modified

Jul 11, 2018

Products (137)

  • Cisco Catalyst 2960-S Series Switches
  • Cisco ME 3400EG-2CS-A Switch
  • Cisco Catalyst 2960-24TC-L Switch
  • Cisco Catalyst 3560E-48PD-SF Switch
  • Cisco Catalyst 3750G-12S Switch
  • Cisco Catalyst 3560-12PC-S Compact Switch
  • Cisco Catalyst 3750V2-24PS Switch
  • Cisco Catalyst 3560E-24TD-S Switch
  • Cisco Catalyst 2960-24-S Switch
  • Cisco Catalyst 3560X-48P-S Switch
View all products in Bug Search Tool Login Required

Known Affected Releases

12.2(55)SE

Description (partial)

Symptom:
SW:122-55.SE7
HW:WS-C2960S-48FPD-L

When issued command "authentication port-control auto" on a specific port, the port LED turns to amber;if remove this command,the LED turns back to normal green.

*Mar  9 07:30:47.686 GMT: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/10, changed state
to up
*Mar  9 07:30:48.845 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface
GigabitEthernet1/0/10, changed state to up
VWTS02-USR-AS2960-01# 
*Mar  9 07:31:01.899 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface
GigabitEthernet1/0/10, changed state to down
*Mar  9 07:31:03.907 GMT: %LINEPROTO-5-UPDOWN: Line protocol on Interface
GigabitEthernet1/0/10, changed state to up
*Mar  9 07:31:04.945 GMT: %AUTHMGR-5-START: Starting 'mab' for client (2c3e.cf7a.32d6) on
Interface Gi1/0/10 AuditSessionID C0A85A330000028929185E44
*Mar  9 07:31:04.961 GMT: %MAB-5-SUCCESS: Authentication successful for client
(2c3e.cf7a.32d6) on Interface Gi1/0/10 AuditSessionID C0A85A330000028929185E44
*Mar  9 07:31:04.961 GMT: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab'
for client (2c3e.cf7a.32d6) on Interface Gi1/0/10 AuditSessionID C0A85A330000028929185E44
*Mar  9 07:31:05.784 GMT: %AUTHMGR-5-SUCCESS: Authorization succeeded for client
(2c3e.cf7a.32d6) on Interface Gi1/0/10 AuditSessionID C0A85A330000028929185E44


This is the logging when the port Gi1/0/10 is turned on. After successfully authenticated, the LED turned to amber.

Conditions:
With CLI command "authentication port-control auto" enabled on specific interface(in this case the port connected with IP phone).

Related Community Discussions

amber lights after 802.1x but still communicating
Hello,   I recently created a network policy server(windows based) to deploy the 802.1x port based authentication. the switches(2960x) configuration was performed to point to the radius server and the dot1x applied per port. The group policy was applied successfully on all pcs. Since then a lot of amber leds appeared on the switch, All ports are connected to cisco phones type 7821 and 7942.however all phones are registered to the CME and all pcs are able to communicate and access the internet.  a ...
Latest activity: Jun 18, 2015
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.