Имя пользователя:
Пароль:  
Помощь | Регистрация | Забыли пароль?  | Правила  

Компьютерный форум OSzone.net » Серверные продукты Microsoft » Windows Server 2008/2008 R2 » 2008 R2 - 802.1x cat 3750 windows NPS

Ответить
Настройки темы
2008 R2 - 802.1x cat 3750 windows NPS

Аватара для Alexey.sh

Новый участник


Сообщения: 4
Благодарности: 0


Конфигурация

Профиль | Отправить PM | Цитировать


Не могу разобраться с проблемой такое ощущение что непроходит аутентификация пользователя на сервере NPS. Использую аутентификацию EAP(PEAP) Сертификат выписан для NPS, CA добавлен на клиенте в доверенные центры. В логах NPS пищеться что такойто пользователь применена такаята нетворк полиси. В нетворк полиси прописаны атрибуты радиуса для настройки VLAN. В логах системы только

Код: Выделить весь код
A LDAP connection with domain controller server.**** for domain *** is established.
настройки на порту

Код: Выделить весь код
interface FastEthernet1/0/2  
switchport mode access  
dot1x pae authenticator  
dot1x port-control auto  
dot1x timeout reauth-period 30  
dot1x reauthentication  
no cdp enable  
spanning-tree portfast  
spanning-tree guard root

Отправлено: 09:38, 11-01-2012

 

Аватара для Denis Dyagilev

Модератор


Moderator


Сообщения: 967
Благодарности: 222

Профиль | Отправить PM | Цитировать


NPS в Actice Directory зарегистрирован?

Отправлено: 20:55, 11-01-2012 | #2



Для отключения данного рекламного блока вам необходимо зарегистрироваться или войти с учетной записью социальной сети.

Если же вы забыли свой пароль на форуме, то воспользуйтесь данной ссылкой для восстановления пароля.


Аватара для Alexey.sh

Новый участник


Сообщения: 4
Благодарности: 0

Профиль | Отправить PM | Цитировать


Denis Dyagilev,
Да зарегистрирован. Сертификат выписан. Такое ощущение что NPS не передает свичу нужных данных и он заново отправляет запрос на него. Клиентский компьютер не состоит в домене на него импортирован сертификат корневого CA в доверенные. Вот кусок лога на каталисте
Код: Выделить весь код
Dec 29 10:35:22.008: dot1x-packet:Received an EAPOL frame on interface FastEthernet1/0/2
Dec 29 10:35:22.008: dot1x-ev:Received pkt saddr =f0bf.97d5.abd2 , daddr = 0180.c200.0003,
                    pae-ether-type = 888e.0100.0069
Dec 29 10:35:22.008: dot1x-ev:dot1x_auth_process_eapol: EAPOL flag status of the port  Fa1/0/2 is TRUE

Dec 29 10:35:22.008: dot1x-packet:Received an EAP packet on interface FastEthernet1/0/2
Dec 29 10:35:22.008: EAPOL pak dump rx
Dec 29 10:35:22.008: EAPOL Version: 0x1  type: 0x0  length: 0x0069
Dec 29 10:35:22.008: dot1x-packet:Received an EAP packet on the FastEthernet1/0/2 from mac f0bf.97d5.abd2
Dec 29 10:35:22.008: dot1x-sm:Posting EAPOL_EAP on Client=4650FDC
Dec 29 10:35:22.008:     dot1x_auth_bend Fa1/0/2: during state auth_bend_request, got event 6(eapolEap)
Dec 29 10:35:22.008: @@@ dot1x_auth_bend Fa1/0/2: auth_bend_request -> auth_bend_response
Dec 29 10:35:22.008: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_response_enter called
Dec 29 10:35:22.008: dot1x-ev:dot1x_sendRespToServer: Response sent to the server from f0bf.97d5.abd2
Dec 29 10:35:22.008: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_request_response_action called
Dec 29 10:35:22.008: AAA/AUTHEN/8021X (00000384): Pick method list 'default'
Dec 29 10:35:22.016: RADIUS/ENCODE(00000384):Orig. component type = DOT1X
Dec 29 10:35:22.016: RADIUS:  AAA Unsupported Attr: audit-session-id  [599] 24
Dec 29 10:35:22.016: RADIUS:   43 30 41 38 36 34 33 37 30 30 30 30 30 34 35 43  [C0A864370000045C]
Dec 29 10:35:22.016: RADIUS:   37 31 33 41 46 30            [ 713AF0]
Dec 29 10:35:22.016: RADIUS:  AAA Unsupported Attr: interface         [170] 17
Dec 29 10:35:22.016: RADIUS:   46 61 73 74 45 74 68 65 72 6E 65 74 31 2F 30   [ FastEthernet1/0]
Dec 29 10:35:22.016: RADIUS(00000384): Config NAS IP: 0.0.0.0
Dec 29 10:35:22.016: RADIUS/ENCODE(00000384): acct_session_id: 900
Dec 29 10:35:22.016: RADIUS(00000384): sending
Dec 29 10:35:22.016: RADIUS/ENCODE: Best Local IP-Address 192.168.100.55 for Radius-Server 192.168.20.52
Dec 29 10:35:22.016: RADIUS(00000384): Send Access-Request to 192.168.20.52:1812 id 1645/107, len 280
Dec 29 10:35:22.016: RADIUS:  authenticator C1 95 C1 F2 88 45 8B D9 - 11 D0 A9 6E E2 D6 03 A2
Dec 29 10:35:22.016: RADIUS:  User-Name           [1]   10  "slh\test"
Dec 29 10:35:22.016: RADIUS:  Service-Type        [6]   6   Framed                    [2]
Dec 29 10:35:22.016: RADIUS:  Framed-MTU          [12]  6   1504
Dec 29 10:35:22.016: RADIUS:  Called-Station-Id   [30]  19  "00-0F-23-8B-32-84"
Dec 29 10:35:22.016: RADIUS:  Calling-Station-Id  [31]  19  "F0-BF-97-D5-AB-D2"
Dec 29 10:35:22.016: RADIUS:  EAP-Message         [79]  107
Dec 29 10:35:22.016: RADIUS:   02 03 00 69 19 80 00 00 00 5F 16 03 01 00 5A 01 00 00 56 03 01 4E FC 42 68 02 8B 0F 9F 24 4F 51 03 08 B7 2C E0 F6 3D B7 8E 9B 8C 06 2C FB A1 38 3A 5D  [i_ZVNBh$OQ,=,8:]]
Dec 29 10:35:22.016: RADIUS:   6E E2 40 00 00 18 00 2F 00 35 00 05 00 0A C0 13 C0 14 C0 09 C0 0A 00 32 00 38 00 13 00 04 01 00 00 15 FF 01 00 01 00 00 0A 00 06 00 04 00 17 00 18 00 0B 00 02 01 00            [ n@/528]
Dec 29 10:35:22.016: RADIUS:  Message-Authenticato[80]  18
Dec 29 10:35:22.016: RADIUS:   F5 A2 D4 FC 87 F7 4D 2D E7 2A DB 20 79 FD 55 90            [ M-* yU]
Dec 29 10:35:22.016: RADIUS:  NAS-Port-Type       [61]  6   Ethernet                  [15]
Dec 29 10:35:22.016: RADIUS:  NAS-Port            [5]   6   50102
Dec 29 10:35:22.016: RADIUS:  NAS-Port-Id         [87]  19  "FastEthernet1/0/2"
Dec 29 10:35:22.016: RADIUS:  State               [24]  38
Dec 29 10:35:22.016: RADIUS:   60 83 07 CB 00 00 01 37 00 01 17 00 FE 80 00 00 00 00 00 00 84 2B C8 92 1C DA 70 59 00 00 00 04 6E 49 DB 9E           [ `7+pYnI]
Dec 29 10:35:22.024: RADIUS:  NAS-IP-Address      [4]   6   192.168.100.55
Dec 29 10:35:22.024: RADIUS: Received from id 1645/107 192.168.20.52:1812, Access-Challenge, len 1594
Dec 29 10:35:22.024: RADIUS:  authenticator 65 CD A9 43 E7 F0 17 93 - 5D F6 DE 6B 9A 8B D7 03
Dec 29 10:35:22.024: RADIUS:  Session-Timeout     [27]  6   30
Dec 29 10:35:22.024: RADIUS:  EAP-Message         [79]  255
Dec 29 10:35:22.024: RADIUS:   01 04 05 DC 19 C0 00 00 08 E8 16 03 01 08 E3 02 00 00 4D 03 01 4E FC 42 6A 17 CA F9 DB 05 B7 B7 03 36 C9 5E D5 08 23 31 98 F8 4A 5D FC 80 57 5C 95 3B 38 CA 93 20 DE 32  [MNBj6^#1J]W\;8 2]
Dec 29 10:35:22.024: RADIUS:   00 00 FC 84 A8 91 EE F3 2B 72 21 50 EB FF 7A FA C6 3D 0C 14 E8 1B D4 BA 91 B6 CB A0 D4 87 00 2F 00 00 05 FF 01 00 01 00 0B 00 06 41 00 06 3E 00 06 3B 30 82 06 37 30 82 05 1F A0 03 02 01 02 02 0A 61 D6 70 62  [+r!Pz=/A>;070apb]
Dec 29 10:35:22.024: RADIUS:   00 00 00 00 00 1E 30 0D 06 09 2A 86 48 86 F7 0D 01 01 05 05 00 30 44 31 13 30 11 06 0A 09 92 26 89 93 F2 2C 64 01 19 16 03 49 4E 54 31 13 30 11 06 0A 09 92 26  [0*H0D10&,dINT10&]
Dec 29 10:35:22.033: RADIUS:   89 93 F2 2C 64 01 19 16 03 53 4C 48 31 18 30 16 06 03 55 04 03 13 0F 53 4C 48 2D 53 45 52 56  [,dSLH10USLH-SERV]
Dec 29 10:35:22.033: RADIUS:   45 52 35 30 2D 43 41 30 1E 17 0D 31 31 31 32 32 36 31 30  [ER50-CA011122610]
Dec 29 10:35:22.033: RADIUS:   31 31 35 34 5A 17 0D 31 32 31 32 32 35 31 30 31 31 35  [1154Z12122510115]
Dec 29 10:35:22.033: RADIUS:   34 5A 30 1D 31 1B 30             [ 4Z010]
Dec 29 10:35:22.033: RADIUS:  EAP-Message         [79]  255
Dec 29 10:35:22.033: RADIUS:   19 06 03 55 04 03 13 12 53 65 72 76 65 72 53 6F 66 74 2E 53 4C 48 2E  [UServerSoft.SLH.]
Dec 29 10:35:22.033: RADIUS:   49 4E 54 30 82 01 22 30 0D 06 09 2A 86 48 86 F7 0D 01 01 01 05 00 03 82 01 0F 00 30 82 01 0A 02 82 01 01 00 AA 49 18 EA CC 59 97 DD 70 16 F1 E2 32 0B 3A 23 1B 1D 0B 98 8A 58  [INT0"0*H0IYp2:#X]
Dec 29 10:35:22.033: RADIUS:   56 DC F5 34 C3 BB 88 C0 CF 94 89 F9 41 87 92 DC 67 85 3B 1B 7F 6D B8 14 85 AF E6 3A F7 11 D6 59 5E 71 48 D3 E7 8F BB F5 FE 89 06 9F BA BC 23 80 E0 DE 91 05 06 17 0E E6 31 A4 8F 69 21 8A 21  [V4Ag;m:Y^qH#1i!!]
Dec 29 10:35:22.033: RADIUS:   4D 82 57 EA E9 08 AD 71 B0 EB 14 2A E5 92 F5 4D 3E C8 30 76 05 78 65 EA 0F D9 8A 9C 02 29 6B 06 2C E1 43 A6 B7 37 B8 CD 62  [MWq*M>0vxe)k,C7b]
Dec 29 10:35:22.033: RADIUS:   C4 BE 16 38 81 A7 B2 63 26 E8 75 2B 31 FD 6D 1F FB 6B 7C 5F E9 09 F8 FF 4E 9D A9 3D 61 C9 51 FA 71 E7 27  [8c&u+1mk|_N=aQq']
Dec 29 10:35:22.033: RADIUS:   45 3F B4 FD 0D 8B 0A 95 5B 1F 71 1F 49 23 0E 79 76 2F 1E CB 61 E4 EE B3 A9 F6 74 D0 DA 57 69 7C 94    [ E?[qI#yv/atWi|]
Dec 29 10:35:22.033: RADIUS:  EAP-Message         [79]  255
Dec 29 10:35:22.033: RADIUS:   81 92 0A 0D A5 DE D5 FA 58 1F C7 ED 39 D9 E4 0C 0B B7 20 DE 24 6B 0B 8D EA 79 8C 6A 24 C1 AD CE F7 CB 66 21 05 C9 55 27 7C 01 7B D0 DF D1 E6 4A 2A  [X9 $kyj$f!U'|{J*]
Dec 29 10:35:22.041: RADIUS:   6F 9A F9 F1 35 FC CF DC 17 2F 92 F9 B1 02 03 01 00 01 A3 82 03 50 30 82 03 4C 30 3B 06 09 2B 06 01 04 01 82 37 15 07 04 2E 30 2C 06 24 2B 06 01 04 01 82 37  [o5/P0L0;+7.0,$+7]
Dec 29 10:35:22.041: RADIUS:   15 08 F6 C5 07 87 E3 A4 78 83 F1 91 21 86 EA D2 5E DE 9E 6E 26 85 82 83 1B 81 E6 AA 10 02 01 64 02 01 05 30 1D 06 03 55 1D 25 04 16 30 14 06 08 2B 06 01 05 05 07 03 01 06 08 2B 06 01 05 05 07 03 02 30 0E 06 03 55 1D 0F 01 01 FF 04 04 03 02 05 A0 30 38  [x!^n&d0U?0++0U08]
Dec 29 10:35:22.041: RADIUS:   06 03 55 1D 20 04 31 30 2F 30 0A 06 08 2B 06 01 05 05 07 03 01 30 21 06 1F 2B 06 01 04 01 82 37 15 08 F6 C5 07 87 E3 A4 78 83 F1 91 21 86 EA D2 5E DE 9E 6E 26  [U 10/0+0!+7x!^n&]
Dec 29 10:35:22.041: RADIUS:   01 83 11 30 27 06 09 2B 06 01 04 01 82 37 15              [ 0'+7]
Dec 29 10:35:22.041: RADIUS:  EAP-Message         [79]  255
Dec 29 10:35:22.041: RADIUS:   0A 04 1A 30 18 30 0A 06 08 2B 06 01 05 05 07 03 01 30 0A 06 08 2B 06 01 05 05 07 03 02 30 1D 06 03 55 1D 0E 04 16 04 14 C8 93 70 E3 3B 87 A4 86 B2 D2 2B 1D 1B 8C 0A 60 8C 00 21 C5 30 1F 06 03 55 1D 23 04 18 30  [00+0+0Up;+`!0U#0]
Dec 29 10:35:22.041: RADIUS:   16 80 14 0A 1F F0 94 E7 DD DD 61 05 CB 31 92 92 D5 3D AE 6A 2C 92 DB 30 82 01 02 06 03 55 1D 1F 04 81 FA 30 81 F7 30 81 F4 A0 81 F1 A0 81 EE 86 81 B3 6C 64 61 70 3A 2F 2F  [a1=j,0U00ldap://]
Dec 29 10:35:22.041: RADIUS:   2F 43 4E 3D 53 4C 48 2D 53 45 52 56 45 52 35 30  [/CN=SLH-SERVER50]
Dec 29 10:35:22.041: RADIUS:   2D 43 41 2C 43 4E 3D 73 65 72 76 65 72 35 30 2C  [-CA,CN=server50,]
Dec 29 10:35:22.041: RADIUS:   43 4E 3D 43 44 50 2C 43 4E 3D 50 75 62 6C 69 63  [CN=CDP,CN=Public]
Dec 29 10:35:22.041: RADIUS:   25 32 30 4B 65 79 25 32 30 53 65 72 76 69 63 65  [?20Key?20Service]
Dec 29 10:35:22.041: RADIUS:   73 2C 43 4E 3D 53 65 72 76 69 63 65 73 2C 43 4E  [s,CN=Services,CN]
Dec 29 10:35:22.050: RADIUS:   3D 43 6F 6E 66 69 67 75 72 61 74 69 6F 6E 2C 44  [=Configuration,D]
Dec 29 10:35:22.050: RADIUS:   43 3D 53 4C 48 2C 44 43 3D 49 4E 54 3F 63 65 72  [C=SLH,DC=INT?cer]
Dec 29 10:35:22.050: RADIUS:   74 69 66 69 63 61 74 65 52 65 76 6F 63 61    [ tificateRevoca]
Dec 29 10:35:22.050: RADIUS:  EAP-Message         [79]  255
Dec 29 10:35:22.050: RADIUS:   74 69 6F 6E 4C 69 73 74 3F 62 61 73 65 3F 6F 62  [tionList?base?ob]
Dec 29 10:35:22.050: RADIUS:   6A 65 63 74 43 6C 61 73 73 3D 63 52 4C 44 69 73  [jectClass=cRLDis]
Dec 29 10:35:22.050: RADIUS:   74 72 69 62 75 74 69 6F 6E 50 6F 69 6E 74 86 36 68  [tributionPoint6h]
Dec 29 10:35:22.050: RADIUS:   74 74 70 3A 2F 2F 73 65 72 76 65 72 35 30 2E 73  [ttp://server50.s]
Dec 29 10:35:22.050: RADIUS:   6C 68 2E 69 6E 74 2F 43 65 72 74 45 6E 72 6F 6C  [lh.int/CertEnrol]
Dec 29 10:35:22.050: RADIUS:   6C 2F 53 4C 48 2D 53 45 52 56 45 52 35 30 2D 43  [l/SLH-SERVER50-C]
Dec 29 10:35:22.050: RADIUS:   41 2E 63 72 6C 30 82 01 14 06 08 2B 06 01 05 05 07 01 01 04 82 01 06 30 82 01 02 30 81 AA 06 08 2B 06 01 05 05 07 30 02 86 81 9D 6C 64 61 70 3A  [A.crl0+00+0ldap:]
Dec 29 10:35:22.050: RADIUS:   2F 2F 2F 43 4E 3D 53 4C 48 2D 53 45 52 56 45 52  [///CN=SLH-SERVER]
Dec 29 10:35:22.050: RADIUS:   35 30 2D 43 41 2C 43 4E 3D 41 49 41 2C 43 4E 3D  [50-CA,CN=AIA,CN=]
Dec 29 10:35:22.050: RADIUS:   50 75 62 6C 69 63 25 32 30 4B 65 79 25 32 30 53  [Public?20Key?20S]
Dec 29 10:35:22.050: RADIUS:   65 72 76 69 63 65 73 2C 43 4E 3D 53 65 72 76 69  [ervices,CN=Servi]
Dec 29 10:35:22.050: RADIUS:   63 65 73 2C 43 4E 3D 43 6F 6E 66 69 67 75 72 61  [ces,CN=Configura]
Dec 29 10:35:22.050: RADIUS:   74 69 6F 6E 2C 44 43 3D 53 4C 48 2C 44 43 3D 49  [tion,DC=SLH,DC=I]
Dec 29 10:35:22.050: RADIUS:   4E 54 3F 63 41 43 65 72 74 69 66 69      [ NT?cACertifi]
Dec 29 10:35:22.050: RADIUS:  EAP-Message         [79]  237
Dec 29 10:35:22.050: RADIUS:   63 61 74 65 3F 62 61 73 65 3F 6F 62 6A 65 63 74  [cate?base?object]
Dec 29 10:35:22.050: RADIUS:   43 6C 61 73 73 3D 63 65 72 74 69 66 69 63 61 74  [Class=certificat]
Dec 29 10:35:22.050: RADIUS:   69 6F 6E 41 75 74 68 6F 72 69 74 79 30 53 06 08 2B 06 01 05 05 07 30  [ionAuthority0S+0]
Dec 29 10:35:22.050: RADIUS:   02 86 47 68 74 74 70 3A 2F 2F 73 65 72 76 65 72 35 30  [Ghttp://server50]
Dec 29 10:35:22.050: RADIUS:   2E 73 6C 68 2E 69 6E 74 2F 43 65 72 74 45 6E 72  [.slh.int/CertEnr]
Dec 29 10:35:22.050: RADIUS:   6F 6C 6C 2F 73 65 72 76 65 72 35 30 2E 73 6C 68  [oll/server50.slh]
Dec 29 10:35:22.058: RADIUS:   2E 69 6E 74 5F 53 4C 48 2D 53 45 52 56 45 52 35  [.int_SLH-SERVER5]
Dec 29 10:35:22.058: RADIUS:   30 2D 43 41 2E 63 72 74 30 1D 06 03 55 1D 11 04 16 30 14 82 12 53 65 72 76 65  [0-CA.crt0U0Serve]
Dec 29 10:35:22.058: RADIUS:   72 53 6F 66 74 2E 53 4C 48 2E 49 4E 54 30 0D 06 09 2A 86 48  [rSoft.SLH.INT0*H]
Dec 29 10:35:22.058: RADIUS:   86 F7 0D 01 01 05 05 00 03 82 01 01 00 38 02 56 53 3F 9F A6 F8 1A D7 9B FD 1D 4D 4D C0 D5 1D DE 0A 0C 3E AC 9A 0B AD 47 61 9B FD AC 66 05 C8 BE 58 23 ED 9E 08 6A E4 6B 9B 5F B9 A8 13 15 63  [8VS?MM>GafX#jk_c]
Dec 29 10:35:22.058: RADIUS:   9E C1 04 A5 62                 [ b]
Dec 29 10:35:22.058: RADIUS:  State               [24]  38
Dec 29 10:35:22.058: RADIUS:   60 83 07 CB 00 00 01 37 00 01 17 00 FE 80 00 00 00 00 00 00 84 2B C8 92 1C DA 70 59 00 00 00 04 6E 49 DB 9E           [ `7+pYnI]
Dec 29 10:35:22.058: RADIUS:  Message-Authenticato[80]  18
Dec 29 10:35:22.058: RADIUS:   8C B4 9F 39 08 B6 BE 0A C6 49 61 F5 0A E2 92 28              [ 9Ia(]
Dec 29 10:35:22.058: RADIUS(00000384): Received from id 1645/107
Dec 29 10:35:22.058: RADIUS/DECODE: EAP-Message fragments, 253+253+253+253+253+235, total 1500 bytes
Dec 29 10:35:22.058: dot1x-packet:Received an EAP request packet from EAP for mac f0bf.97d5.abd2
Dec 29 10:35:22.058: dot1x-sm:Posting EAP_REQ on Client=4650FDC
Dec 29 10:35:22.058:     dot1x_auth_bend Fa1/0/2: during state auth_bend_response, got event 7(eapReq)
Dec 29 10:35:22.058: @@@ dot1x_auth_bend Fa1/0/2: auth_bend_response -> auth_bend_request
Dec 29 10:35:22.058: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_response_exit called
Dec 29 10:35:22.058: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_request_enter called
Dec 29 10:35:22.058: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x4  length: 0x05DC type: 0x19 data: @
Dec 29 10:35:22.058: dot1x-ev:FastEthernet1/0/2:Sending EAPOL packet to group PAE address
Dec 29 10:35:22.058: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet1/0/2.
Dec 29 10:35:22.058: dot1x-registry:registry:dot1x_ether_macaddr called
Dec 29 10:35:22.066: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet1/0/2
Dec 29 10:35:22.066: EAPOL pak dump Tx
Dec 29 10:35:22.066: EAPOL Version: 0x2  type: 0x0  length: 0x05DC
Dec 29 10:35:22.066: EAP code: 0x1  id: 0x4  length: 0x05DC type: 0x19
Dec 29 10:35:22.066: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (f0bf.97d5.abd2)
Dec 29 10:35:22.066: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_response_request_action called
Dec 29 10:35:40.010: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet1/0/2.
Dec 29 10:35:40.010: dot1x-packet:dot1x_mgr_process_eapol_pak: queuing an EAPOL pkt on Authenticator Q
Dec 29 10:35:40.010: dot1x-ev:Enqueued the eapol packet to the global authenticator queue
Dec 29 10:35:40.010: EAPOL pak dump rx
Dec 29 10:35:40.010: EAPOL Version: 0x1  type: 0x1  length: 0x0000
Dec 29 10:35:40.010: dot1x-ev:
dot1x_auth_queue_event: Int Fa1/0/2 CODE= 0,TYPE= 0,LEN= 0

Dec 29 10:35:40.010: dot1x-packet:Received an EAPOL frame on interface FastEthernet1/0/2
Dec 29 10:35:40.010: dot1x-ev:Received pkt saddr =f0bf.97d5.abd2 , daddr = 0180.c200.0003,
                    pae-ether-type = 888e.0101.0000
Dec 29 10:35:40.010: dot1x-ev:dot1x_auth_process_eapol: EAPOL flag status of the port  Fa1/0/2 is TRUE

Dec 29 10:35:40.010: dot1x-packet:Received an EAPOL-Start packet on interface FastEthernet1/0/2
Dec 29 10:35:40.010: EAPOL pak dump rx
Dec 29 10:35:40.010: EAPOL Version: 0x1  type: 0x1  length: 0x0000
Dec 29 10:35:40.010: dot1x-sm:Posting EAPOL_START on Client=4650FDC
Dec 29 10:35:40.010:     dot1x_auth Fa1/0/2: during state auth_authenticating, got event 4(eapolStart)
Dec 29 10:35:40.010: @@@ dot1x_auth Fa1/0/2: auth_authenticating -> auth_aborting
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_authenticating_exit called
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_aborting_enter called
Dec 29 10:35:40.010: dot1x-sm:Posting AUTH_ABORT on Client=4650FDC
Dec 29 10:35:40.010:     dot1x_auth_bend Fa1/0/2: during state auth_bend_request, got event 1(authAbort)
Dec 29 10:35:40.010: @@@ dot1x_auth_bend Fa1/0/2: auth_bend_request -> auth_bend_initialize
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_initialize_enter called
Dec 29 10:35:40.010:     dot1x_auth_bend Fa1/0/2: idle during state auth_bend_initialize
Dec 29 10:35:40.010: @@@ dot1x_auth_bend Fa1/0/2: auth_bend_initialize -> auth_bend_idle
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_idle_enter called
Dec 29 10:35:40.010: dot1x-sm:Posting !AUTH_ABORT on Client=4650FDC
Dec 29 10:35:40.010:     dot1x_auth Fa1/0/2: during state auth_aborting, got event 21(no_eapolLogoff_no_authAbort)
Dec 29 10:35:40.010: @@@ dot1x_auth Fa1/0/2: auth_aborting -> auth_restart
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_aborting_exit called
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_restart_enter called
Dec 29 10:35:40.010: dot1x-ev:Resetting the client f0bf.97d5.abd2
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_aborting_restart_action called
Dec 29 10:35:40.010: dot1x-sm:Posting !EAP_RESTART on Client=4650FDC
Dec 29 10:35:40.010:     dot1x_auth Fa1/0/2: during state auth_restart, got event 6(no_eapRestart)
Dec 29 10:35:40.010: @@@ dot1x_auth Fa1/0/2: auth_restart -> auth_connecting
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_connecting_enter called
Dec 29 10:35:40.010: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_restart_connecting_action called
Dec 29 10:35:40.010: dot1x-packet:Received an EAP request packet from EAP for mac f0bf.97d5.abd2
Dec 29 10:35:40.018: dot1x-sm:Posting RX_REQ on Client=4650FDC
Dec 29 10:35:40.018:     dot1x_auth Fa1/0/2: during state auth_connecting, got event 11(eapReq_no_reAuthMax)
Dec 29 10:35:40.018: @@@ dot1x_auth Fa1/0/2: auth_connecting -> auth_authenticating
Dec 29 10:35:40.018: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_authenticating_enter called
Dec 29 10:35:40.018: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_connecting_authenticating_action called
Dec 29 10:35:40.018: dot1x-sm:Posting AUTH_START on Client=4650FDC
Dec 29 10:35:40.018:     dot1x_auth_bend Fa1/0/2: during state auth_bend_idle, got event 4(eapReq_authStart)
Dec 29 10:35:40.018: @@@ dot1x_auth_bend Fa1/0/2: auth_bend_idle -> auth_bend_request
Dec 29 10:35:40.018: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_request_enter called
Dec 29 10:35:40.018: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1  data:
Dec 29 10:35:40.018: dot1x-ev:FastEthernet1/0/2:Sending EAPOL packet to group PAE address
Dec 29 10:35:40.018: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet1/0/2.
Dec 29 10:35:40.018: dot1x-registry:registry:dot1x_ether_macaddr called
Dec 29 10:35:40.018: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet1/0/2
Dec 29 10:35:40.018: EAPOL pak dump Tx
Dec 29 10:35:40.018: EAPOL Version: 0x2  type: 0x0  length: 0x0005
Dec 29 10:35:40.018: EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1
Dec 29 10:35:40.018: dot1x-packet:dot1x_txReq: EAPOL packet sent to client (f0bf.97d5.abd2)
Dec 29 10:35:40.018: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_idle_request_action called
Dec 29 10:36:10.889: dot1x-packet:Received an EAP request packet from EAP for mac f0bf.97d5.abd2
Dec 29 10:36:10.889: dot1x-sm:Posting EAP_REQ on Client=4650FDC
Dec 29 10:36:10.889:     dot1x_auth_bend Fa1/0/2: during state auth_bend_request, got event 7(eapReq)
Dec 29 10:36:10.889: @@@ dot1x_auth_bend Fa1/0/2: auth_bend_request -> auth_bend_request
Dec 29 10:36:10.889: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_request_request_action called
Dec 29 10:36:10.889: dot1x-sm:Fa1/0/2:f0bf.97d5.abd2:auth_bend_request_enter called
Dec 29 10:36:10.889: dot1x-packet:dot1x_mgr_send_eapol :EAP code: 0x1  id: 0x5  length: 0x0005 type: 0x1  data:
Dec 29 10:36:10.889: dot1x-ev:FastEthernet1/0/2:Sending EAPOL packet to group PAE address
Dec 29 10:36:10.889: dot1x-ev:dot1x_mgr_pre_process_eapol_pak: Role determination not required on FastEthernet1/0/2.
Dec 29 10:36:10.889: dot1x-registry:registry:dot1x_ether_macaddr called
Dec 29 10:36:10.889: dot1x-ev:dot1x_mgr_send_eapol: Sending out EAPOL packet on FastEthernet1/0/2

Последний раз редактировалось Alexey.sh, 12-01-2012 в 06:51.


Отправлено: 06:32, 12-01-2012 | #3



Компьютерный форум OSzone.net » Серверные продукты Microsoft » Windows Server 2008/2008 R2 » 2008 R2 - 802.1x cat 3750 windows NPS

Участник сейчас на форуме Участник сейчас на форуме Участник вне форума Участник вне форума Автор темы Автор темы Шапка темы Сообщение прикреплено

Похожие темы
Название темы Автор Информация о форуме Ответов Последнее сообщение
Прочее - Помогите разобраться в витой паре (CAT 5e, CAT 6) Vladimir_17 Сетевое оборудование 28 18-09-2015 09:58
Прочее - 802.11d и 802.11h zai Сетевые технологии 0 20-10-2011 23:08
Установка - Т-39 Установка запрашивает путь к asms, NT5INF.CAT, nt5.cat и прочим eEugenius Автоматическая установка Windows 2000/XP/2003 1 17-08-2011 21:37
Switch/802.3 - Realtek 8168/8111 + 802.1q на Windows AVTS Сетевое оборудование 0 02-09-2008 15:21
NPS Radius логи goldfinger Microsoft Windows NT/2000/2003 0 18-07-2008 11:43




 
Переход