Symptom
Depends on IOS-XE version:
ON 16.6.1 and later:
Lots of logs for %SNMP-3-RESPONSE_DELAYED: processing GetNext of cafSessionEntry.2
On earlier versions:
Lots of %SNMP-3-INPUT_QFULL_ERR: Packet dropped due to input errors without signs of high cpu.
---
This can cause NMS systems to timeout their SNMP poll.
Conditions
It appears to be specific to catalyst switches.
It is triggered by polling CISCO-AUTH-FRAMEWORK-MIB via SNMP.
It does not require that dot1x be configured.
Workaround
Apply a view to block the OID:
snmp-server view test internet included
snmp-server view test 1.3.6.1.4.1.9.9.656 excluded
snmp-server community public view test RO
Further Problem Description