In my network I'm using 5400 and 2600 switches. I have configure on them MAC authentication with IDM and IAS. With 2600 switches everything is ok, but with 5400 there is a problem with DHCP. In IDM and IAS I have information, that access is granted, but computers can't get IP address. If computer has static IP - everything is ok.
RACL on switch: ----- permit in ip from any to 10.0.0.0/16 cnt ----- DHCP server: 10.0.1.52
Radius and DHCP server are in the same network subnet: 255.255.0.0, but even if I disable dhcp-snooping feature nothing is changing. And now I see other strange behaviour: if I enable port-access mac-based on port, in device log I got messages: ---------- I 03/26/09 22:42:53 00076 ports: port A1 is now on-line I 03/26/09 22:42:43 00435 ports: port A1 is Blocked by AAA I 03/26/09 22:42:42 00077 ports: port A1 is now off-line I 03/26/09 22:42:41 00435 ports: port A1 is Blocked by AAA I 03/26/09 22:42:39 00077 ports: port A1 is now off-line I 03/26/09 22:31:14 00435 ports: port A1 is Blocked by AAA ---------- It takes something about to 10 minutes to get access to network. Why ?
