Re: 802.1x authentication open with 3550

From: Sadiq Yakasai <sadiqtanko_at_gmail.com>
Date: Wed, 15 Apr 2009 15:57:39 +0100

hmmm, sounds dodgy.... using Open Mode, you should be able to pass traffic
into the switchport before authentication. Can you post to us some config on
the port?

Would Cisco TAC listen to you on this one since the 3550 is EOL?

2009/4/15 Lora Ganeva <lganeva_at_mobiltel.bg>

> Hi,
>
>
>
> I am testing it by sniffing traffic. DHCP requests are sent from the host
> but are never leaving the switch on the uplink.
>
>
>
> Regards,
>
> Lora
>
>
>
> *From:* Sadiq Yakasai [mailto:sadiqtanko_at_gmail.com]
> *Sent:* 15 aPRIL 2009 G. 15:07
>
> *To:* Lora Ganeva
> *Cc:* ccielab_at_groupstudy.com
> *Subject:* Re: 802.1x authentication open with 3550
>
>
>
> Cool. Then I guess this is yet another case of it works but not officially
> supported, right?
>
> Anyways, so, traffic does not pass through the port before authc then? How
> about DHCP, at least? How are you testing this?
>
> 2009/4/15 Lora Ganeva <lganeva_at_mobiltel.bg>
>
> Hi,
>
>
>
> The 12.2(50) is working very well, MDA and flexible authentication is OK.
> The only problem is with open mode.
>
>
>
> Regards,
>
> Lora
>
>
>
> *From:* Sadiq Yakasai [mailto:sadiqtanko_at_gmail.com]
> *Sent:* 15 aPRIL 2009 G. 14:45
> *To:* Lora Ganeva
> *Cc:* ccielab_at_groupstudy.com
> *Subject:* Re: 802.1x authentication open with 3550
>
>
>
> Hey Lora,
>
> The 3550 has been EOL'd a long time ago and all feature enhancements are
> definitely not supported. Even old features like MDA (support for IP phone
> authentication) were not officially supported by Cisco in like 12.2(35)SE,
> much less the very latest features like Open Mode authentication.
>
> Does the 12.2(50) code even come on the 3550? I would be really surprised
> if it did!
>
> HTH,
> Sadiq
>
> On Wed, Apr 15, 2009 at 11:31 AM, Lora Ganeva <lganeva_at_mobiltel.bg> wrote:
>
> Dear experts,
>
>
>
> Do you know if 802.1x monitor mode with <authentication open> works on
> cisco 3550 IOS 12.2(50)SE1?
>
>
>
> 10x in advance,
>
> Lora
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>
> --
> CCIE #19963
>
>
>
>
> --
> CCIE #19963
>

--
CCIE #19963
Blogs and organic groups at http://www.ccie.net
Received on Wed Apr 15 2009 - 15:57:39 ART

This archive was generated by hypermail 2.2.0 : Mon May 04 2009 - 07:39:12 ART