Content reorganization and cleanup in the Networking category
Based on an audit of all our content here in the Networking category, we are doing "Spring Cleaning."
Find details here
Security e-Series
Showing results for 
Search instead for 
Do you mean 

2620 - 802.1x authentication renew every 5 min

Occasional Collector

2620 - 802.1x authentication renew every 5 min

We've got 2 types of switch 2610 (firmware 11.84) and 2620 (firmware 15.08 or 15.10).


On the 2620, the user's pc is renewing his authentication every 5min or multiples (10min, 15min). Therefore his session is disconnected (the dhcp is renewed). The situation is occuring on windows XP SP2 or seven.


On the 2610 we've got no problem and the configuration is perfectly identical:

 - one vlan by site if authenticated : 1010, 1011

 - a vlan for toip : 447

 - a vlan if you are not authenticated : 89



Configuration extract:


vlan 1
untagged 1-26
no ip addr

vlan 447
tagged 1-26
qos priority 5
name toip

vlan 1002
name mngt-switch
ip address 172.27.254.x/24
tag 25,26


management-vlan 1002


vlan 1010
name bat-1
tag 25,26
vlan 1011
name bat-2
tag 25,26


vlan 89
name noAuth
tag 25,26
vlan 89 untagged 1-24

ip authorized-managers

aaa authentication ssh login radius local
aaa authentication ssh enable radius local
aaa authentication login privilege-mode
aaa authentication port-access eap-radius
radius-server key xxxxxxxx
radius-server host
radius-server host
aaa port-access authenticator active
aaa port-access authenticator 1-24
aaa port-access authenticator 1-24 client-limit 3
aaa port-access mac-based 1-24
aaa port-access mac-based 1-24 addr-limit 3
aaa port-access mac-based 1-24 logoff-period 86400
aaa port-access 1-24 mixed
aaa port-access mac-based 1-24 unauth-vid 89
include-credentials radius-tacacs-only
aaa port-access mac-based addr-format multi-colon



What is going on ? is it a bug on the switch side ?