Email Subscription Notifications Suspended Temporarily
We are in the process of making navigation in the Servers and Operating Systems forums simpler and more direct. While doing this, we have to temporarily suspend email notifications for subscriptions. If you are subscribed to one or more discussion boards or blogs in the community, please check them daily to see new content. Notifications will be turned back on in a few days. We apologize for any inconvenience this may cause. Thanks, Warren_Admin
Security e-Series
Showing results for 
Search instead for 
Did you mean: 

2620 - 802.1x authentication renew every 5 min

Occasional Collector

2620 - 802.1x authentication renew every 5 min

We've got 2 types of switch 2610 (firmware 11.84) and 2620 (firmware 15.08 or 15.10).


On the 2620, the user's pc is renewing his authentication every 5min or multiples (10min, 15min). Therefore his session is disconnected (the dhcp is renewed). The situation is occuring on windows XP SP2 or seven.


On the 2610 we've got no problem and the configuration is perfectly identical:

 - one vlan by site if authenticated : 1010, 1011

 - a vlan for toip : 447

 - a vlan if you are not authenticated : 89



Configuration extract:


vlan 1
untagged 1-26
no ip addr

vlan 447
tagged 1-26
qos priority 5
name toip

vlan 1002
name mngt-switch
ip address 172.27.254.x/24
tag 25,26


management-vlan 1002


vlan 1010
name bat-1
tag 25,26
vlan 1011
name bat-2
tag 25,26


vlan 89
name noAuth
tag 25,26
vlan 89 untagged 1-24

ip authorized-managers

aaa authentication ssh login radius local
aaa authentication ssh enable radius local
aaa authentication login privilege-mode
aaa authentication port-access eap-radius
radius-server key xxxxxxxx
radius-server host
radius-server host
aaa port-access authenticator active
aaa port-access authenticator 1-24
aaa port-access authenticator 1-24 client-limit 3
aaa port-access mac-based 1-24
aaa port-access mac-based 1-24 addr-limit 3
aaa port-access mac-based 1-24 logoff-period 86400
aaa port-access 1-24 mixed
aaa port-access mac-based 1-24 unauth-vid 89
include-credentials radius-tacacs-only
aaa port-access mac-based addr-format multi-colon



What is going on ? is it a bug on the switch side ?