DOT1x on 3750

From: Grammer, Christopher <cgrammer_at_essilorusa.com>
Date: Fri, 9 Jul 2010 10:47:33 -0500

I am using 2 3750s some of my studies, but I can not seem to get Dot1x
commands under the interface.
I think I am missing something specific to the 3750, but I dont know what.
I did a brief internet search and saw a few people having this issue but
never saw a resolution.

Globally I configure:

dot1x system-auth-control
dot1x guest-vlan supplicant

when I go to the interface I set the switchport mode to access

int fa1/0/24
switchport mode access

Then the only thing i get for dot1x commands is:

SW2(config-if)#dot1x ?
  credentials Credentials profile configuration
  default Configure Dot1x with default values for this port
  max-reauth-req Max No.of Reauthentication Attempts
  max-req Max No.of Retries
  max-start Max No. of EAPOL-Start requests
  pae Set 802.1x interface pae type
  supplicant Configure supplicant parameters
  timeout Various Timeouts

I do the exact same thing on a 3550 and everything works as expected:

 SW3(config-if)#dot1x ?
  auth-fail Configure Authentication Fail values for this port
  control-direction Set the control-direction on the interface
  critical Enable 802.1x Critical Authentication
  default Configure Dot1x with default values for this port
  fallback Enable the Webauth fallback mechanism
  guest-vlan Configure Guest-vlan on this interface
  host-mode Set the Host mode for 802.1x on this interface
  mac-auth-bypass Enable MAC Auth Bypass
  max-reauth-req Max No.of Reauthentication Attempts
  max-req Max No.of Retries
  pae Set 802.1x interface pae type
  port-control set the port-control value
  reauthentication Enable or Disable Reauthentication for this port
  timeout Various Timeouts
  violation-mode Set the Security Violation mode on this interface

I have checked the IOS on the 3750 and here is the sh ver

SW2#sh ver
Cisco IOS Software, C3750 Software (C3750-IPSERVICESK9-M), Version
12.2(53)SE2, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Wed 21-Apr-10 04:49 by prod_rel_team
Image text-base: 0x01000000, data-base: 0x02F00000

ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(44)SE5, RELEASE
SOFTWARE (fc1)

SW2 uptime is 1 hour, 7 minutes
System returned to ROM by power-on
S
*Mar 1 01:07:17.319: %SYS-5-CONFIG_I: Configured from console by
consoleystem image file is "flash:/c3750-ipservicesk9-mz.122-53.SE2.bin"

cisco WS-C3750-24P (PowerPC405) processor (revision M0) with 131072K bytes
of memory.
Processor board ID FDO1243Y0HE
Last reset from power-on
1 Virtual Ethernet interface
24 FastEthernet interfaces
2 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 00:24:13:2E:C0:00
Motherboard assembly number : 73-9672-11
Power supply part number : 341-0029-05
Motherboard serial number : FDO12460DZY
Power supply serial number : DTN124143JZ
Model revision number : M0
Motherboard revision number : A0
Model number : WS-C3750-24PS-S
System serial number : ****************
Top Assembly Part Number : 800-25860-05
Top Assembly Revision Number : C0
Version ID : V06
CLEI Code Number : COMU410ARA
Hardware Board Revision Number : 0x01

Switch Ports Model SW Version SW Image

------ ----- ----- ---------- ----------

* 1 26 WS-C3750-24P 12.2(53)SE2 C3750-IPSERVICESK9-M

Configuration register is 0xF

Blogs and organic groups at http://www.ccie.net
Received on Fri Jul 09 2010 - 10:47:33 ART

This archive was generated by hypermail 2.2.0 : Sun Aug 01 2010 - 19:19:14 ART