Symptom

Topology: PC------3560CG(15.2.2E3)-------ISE When the port is configured as following: authentication order mab dot1x authentication priority dot1x mab Sometimes the switch got into a state where after a shut/no shut, switch receives EAPOL Start from PC for dot1x, it says in the log that it should be sending identity request, but in packet capture (SPAN from the PC port) the switch didn't send anything to the client. After a few seconds dot1x timed out and authentication proceed as MAB.

Conditions

When running 15.2.2E3 and configured as following: authentication order mab dot1x authentication priority dot1x mab

Workaround

Further Problem Description